New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fork server handshake failed #4
Comments
what happens when you run "./a.out " ? (of course replace with a valid input file for a.out) |
The forkserver was still compiled as 64bit application.
Running a.out results in this output
It just reads the input and prints it out. |
well this is for sure something about the 32bit. as I have not tried anything 32bit related with this projects I cant help, sorry :( out of curiosity - why are you using afl-pin? blackbox fuzzing would be so much faster with afl-dyninst or afl -Q (qemu mode) |
while doing something different - I am running into the same problem as you. but the issue seesms to be in afl-fuzz, not pin and not my pintool code. can you please try (download and compile https://github.com/vanhauser-thc/afl-simulate first):
if you dont get errors then its the afl-fuzz issue I am also running into and it has nothing to do with afl-pin or pin-3.x |
In the meantime I compiled afl-pin in debug mode to get more information. Unfortunately I still can't get it to run.
It's really strange that "error reading file" is displayed. That's the output from a.out if the open() command fails. I'm using afl-pin because qemu mode and dyninst both fail for my target. |
yeah sorry my bad, the afl-simulate was missing (if you did "make install", otherwise put the right path for forkserver.so):
what you can also try: AFL_MEM=none afl-fuzz-pin.sh -i in -o out -- /home/ros/pin-3.6-97554-g31f0a167d-gcc-linux//pin -t /usr/local/lib/pintool/afl-pin.so -forkserver -alternative -- ./a.out @@ |
|
hmm my last guess is that something is not 32 bit compiled, afl-pin.so or forkserver.so you have still another chance: https://github.com/vanhauser-thc/afl-dynamorio - this one would also be x10 faster then afl-pin |
I double checked that already:
DynamoRIO was my frist attempt, of course it failed :( |
@v-p-b: I followed your notes to fuzz mpclient with win-afl just like you did. Maybe you have an idea what's going wrong here? Thanks! |
I also encountered the same problem, you have an idea how to solve it? |
installing the forkserver is unreliable. |
I want to fuzz a 32bit binary with your tool. So I compiled it with
-DTARGET_IA32
flag.When I try to run it with any target binray I'm getting this error:
I'm unsure about the few error messages at the beginning. Are they relevant?
When running
$ /home/ros/pin-3.6-97554-g31f0a167d-gcc-linux//pin -t /usr/local/lib/pintool/afl-pin.so -forkserver -- ./a.out @@
I'm getting this error:
Error: AFL environment variable __AFL_SHM_ID not set
Thanks
The text was updated successfully, but these errors were encountered: