Skip to content
This repository was archived by the owner on Apr 20, 2024. It is now read-only.
This repository was archived by the owner on Apr 20, 2024. It is now read-only.

[BUG] Qiling PoC fuzzing doesn't crash on Qiling dev #11

@sgIOlas

Description

@sgIOlas

Discovered issue

Previously, when fuzzing was performed using the "fuzz.py" script with Qiliing stable, AFL++ was able to properly identify and record when the binary crashed but now on Qiling dev, crashes do not seem to be getting caught by AFL++ anymore. It was also observed that when running "fuzz.py" without afl, two different behaviors are exhibited depending on the version of Qiling that is being used. This issue will be discussed with the authors of the Qiling project at qilingframework/qiling#1163.

Versions used

Qiling stable

image

Qiling Dev

image

Fuzzing results

Qiling stable

The crash is found instantly.
image

Qiling dev

No crashes found after fuzzing for 20 minutes.
image

Crash behavior

This is the code snippet that is used to force an artificial crash.
image

Qiling stable

image

Qiling dev

image
image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions