xref: /aosp_15_r20/external/AFLplusplus/utils/afl_proxy/README.md (revision 08b48e0b10e97b33e7b60c5b6e2243bd915777f2)
1*08b48e0bSAndroid Build Coastguard Worker# afl-proxy
2*08b48e0bSAndroid Build Coastguard Worker
3*08b48e0bSAndroid Build Coastguard Workerafl-proxy is an example skeleton file which can easily be used to fuzz
4*08b48e0bSAndroid Build Coastguard Workerand instrument non-standard things.
5*08b48e0bSAndroid Build Coastguard Worker
6*08b48e0bSAndroid Build Coastguard WorkerYou only need to change the while() loop of the main() to send the
7*08b48e0bSAndroid Build Coastguard Workerdata of buf[] with length len to the target and write the coverage
8*08b48e0bSAndroid Build Coastguard Workerinformation to __afl_area_ptr[__afl_map_size]
9*08b48e0bSAndroid Build Coastguard Worker
10*08b48e0bSAndroid Build Coastguard WorkerUPDATE: you can also use [custom mutators](../../docs/custom_mutators.md) with
11*08b48e0bSAndroid Build Coastguard Workerafl_custom_fuzz_send to send data to a target, which is much more efficient!
12*08b48e0bSAndroid Build Coastguard WorkerBut you can only use this feature if you start the target via afl-fuzz and
13*08b48e0bSAndroid Build Coastguard Workera forkserver is active (e.g. via -Q qemu_mode or source compiled).
14*08b48e0bSAndroid Build Coastguard Worker
15