When fuzzing C or C++ projects, is it necessary to instrument the dependent third-party static libraries? #13005
Unanswered
Just-do-st
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi,
If I specify the compiler $CC and $CXX as afl-clang-fast or afl-clang-lto from AFL++, the
build.sh
script will instrument the third-party static libraries when compiling them. This results in larger instrumentation bitmaps, and frequent traversals of these bitmaps during fuzzing can incur significant overhead.I would like to ask if we only want to fuzzing the code implemented in the project, do we need to instrument the actual implementation code of the dependent third-party libraries?
Thanks,
Steven
Beta Was this translation helpful? Give feedback.
All reactions