On Fri, 2014-11-28 at 00:08 +0100, Mark Wielaard wrote:
Using american fuzzy lop has found a lot of issues. It would be nice to make using it a bit easier. Our build files make sure that no shared library uses text relocations, but afl-gcc will insert some on i686. http://www.akkadia.org/drepper/textrelocs.html
Now CC=afl-gcc ./configure --disable-textrelcheck will allow them so that afl can instrument the libraries.
Don't try to use or install them except with afl-fuzz. When selinux is enabled it might prevent loading the libraries with DT_TEXTREL set.
I pushed this to elfutils git master now. Running on 32bit x86 Fedora has discovered some more crashers. I am currently analyzing and will post patches soon.
Thanks,
Mark