Re: [Xen-devel] [PATCH fuzzer v1] Added the --ignore-sigill option for AFL fuzzing

["Caccavale, Samuel" <samcacc@xxxxxxxxxx>]

Yes.  Current staging resolves all of the SIG-ILL related crashes.

Tangentially I have ~1000 crashes which fail the `ctxt->regs->r(ip) == orig_ip'
assert at x86_emulate/x86_emulate.c:9862 when compiling afl-harness statically
with afl-clang-fast.  They do not reproduce when compiled dynamically or
compiled in any way with afl-gcc.

I will look into these and open a new email chain if this is a problem with Xen,
though it looks like an afl or llvm issue.  If you have any insight then please
let me know.

Best,
Sam Caccavale
________________________________________
From: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
Sent: Tuesday, April 23, 2019 12:02 PM
To: Caccavale, Samuel; Sam Caccavale; xen-devel@xxxxxxxxxxxxxxxxxxxx
Cc: Jan Beulich; Doebel, Bjoern; Woodhouse, David; Martin Mazein; Pohlack, 
Martin; Wieczorkiewicz, Pawel; Manthey, Norbert
Subject: Re: [PATCH fuzzer v1] Added the --ignore-sigill option for AFL fuzzing

On 23/04/2019 10:10, Caccavale, Samuel wrote:
> My mistake, I'm currently unable to reproduce the ~100 crashes
> AFL found while fuzzing the master branch, on the current staging
> branch.  It seems some staged patch has since addressed this.
>
> If it is of any interest, most of the crashes came from AVX512
> instructions.
>
> Sorry and thanks,

Not a problem in the slightest.

Are you saying that current staging resolves all the crashed you'd
found?  If not, please do report them.

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel