Re: [Xen-devel] [PATCH fuzzer v1] Added the --ignore-sigill option for AFL fuzzing

["Caccavale, Samuel" <samcacc@xxxxxxxxxx>]

My mistake, I'm currently unable to reproduce the ~100 crashes 
AFL found while fuzzing the master branch, on the current staging 
branch.  It seems some staged patch has since addressed this.

If it is of any interest, most of the crashes came from AVX512 
instructions.

Sorry and thanks,
Sam
________________________________________
From: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
Sent: Thursday, April 18, 2019 6:18 PM
To: Sam Caccavale; xen-devel@xxxxxxxxxxxxxxxxxxxx
Cc: Jan Beulich; Doebel, Bjoern; Woodhouse, David; Martin Mazein; Pohlack, 
Martin; Wieczorkiewicz, Pawel; Manthey, Norbert
Subject: Re: [PATCH fuzzer v1] Added the --ignore-sigill option for AFL fuzzing

On 18/04/2019 16:02, Sam Caccavale wrote:
> As of now, the x86_instruction_emulator will execute opcodes
> belonging to CPU extensions that the host may not have.
> Specifying --ignore-sigill when running afl-harness will ignore
> all SIG_ILL including those generated by the above issue.

Which instructions?  We specifically didn't add a SIG_ILL handler in the
first place to catch mistakes like this so we can fix them.

We've got protection in place so such a mistake isn't an XSA any more,
but it is still an error we'd like to fix in the emulator.

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel