seemoo-lab/VirtFuzz

fuzzing other targets

selfbypass opened this issue · 2 comments

Hi,
I met some questions when fuzzing other targets, such as net, bluetooth.
The log follows:
`$ cargo run --release --package virtfuzz-fuzz -- --device net --cores 0-1 --stages standard

warning: unused import: info
--> src/observer/kcov_map_observer.rs:9:25
|
9 | use log::{debug, error, info, trace, warn};
| ^^^^
|
= note: #[warn(unused_imports)] on by default

warning: virtfuzz (lib) generated 1 warning (run cargo fix --lib -p virtfuzz to apply 1 suggestion)
warning: unused import: libafl_bolts::tuples::Merge
--> fuzz/src/main.rs:10:5
|
10 | use libafl_bolts::tuples::Merge;
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
= note: #[warn(unused_imports)] on by default

warning: unused import: tokens_mutations
--> fuzz/src/main.rs:28:85
|
28 | scheduled::havoc_mutations, I2SRandReplace, StdScheduledMutator,StdMOptMutator, tokens_mutations,
| ^^^^^^^^^^^^^^^^

warning: unused import: power::StdPowerMutationalStage
--> fuzz/src/main.rs:34:56
|
34 | use libafl::stages::{StdMutationalStage, TracingStage, power::StdPowerMutationalStage};
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: virtfuzz-fuzz (bin "virtfuzz-fuzz") generated 3 warnings (run cargo fix --bin "virtfuzz-fuzz" to apply 3 suggestions)
Finished release profile [optimized] target(s) in 0.08s
Running target/release/virtfuzz-fuzz --device net --cores 0-1 --stages standard
[Broker Heartbeat #0] (GLOBAL) run time: 0h-0m-30s, clients: 0, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-1m-0s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-1m-30s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-2m-0s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-2m-30s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-3m-0s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-3m-30s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-4m-0s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-4m-30s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
[Broker Heartbeat #0] (GLOBAL) run time: 0h-5m-0s, clients: 1, corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000
(CLIENT) corpus: 0, objectives: 0, executions: 0, exec/sec: 0.000`

Qemu objects aren't being launched.
[qemu-system-x86] <defunct>

Besides, have you conducted an ablation study to evaluate the enhancement of fuzzing strategies such as mopt?

Thanks.

Hi,

Did you apply the patches related to the coverage of the network stack (0003, 0007)?

No, unfortunately we did not conduct an ablation study, we only ran the evaluations that are in the paper, so with/without initial inputs.

Hi,

Did you apply the patches related to the coverage of the network stack (0003, 0007)?

No, unfortunately we did not conduct an ablation study, we only ran the evaluations that are in the paper, so with/without initial inputs.

Thanks, It works.
I run VirtFuzz with/without Mopt, but it seems to not have a significant impact.