-
-
Notifications
You must be signed in to change notification settings - Fork 141
Closed
Labels
enhancementNew feature or requestNew feature or request
Description
It would be really nice if writes done by the fuzzer using VirtWriteDirty
like so
if (!g_Backend->VirtWriteDirty(NewInputBuffer, MutatedInputBufferPtr,
MutatedInputBufferSize)) {
fmt::print("Failed to insert the testcase\n");
std::abort();
}
could be added to the tenet coverage trace. This will make triaging tenet traces easier since you'll be able to see what part of the input buffer caused the crash if it hasn't been accessed since the fuzzer wrote it. This should also handle the case where we call VirtWriteDirty
in the SetBreakpoint
callback.
as a workaround, i have a janky python script that parses the output tenet files and adds a memory write to approximately the right location containing the buffer from the crash but this isn't ideal.
0vercl0k
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request