made output buffer in fuzzer input tool dynamic

This commit is contained in:
Joel Höner 2016-09-01 19:14:08 +02:00
parent 589c4ae691
commit 5eee4a6b18
1 changed files with 12 additions and 2 deletions

View File

@ -24,6 +24,12 @@
***************************************************************************************************/ ***************************************************************************************************/
/*
* This file implements a tool that is supposed to be fed as input for fuzzers like AFL,
* reading a control block from stdin, allowing the fuzzer to reach every possible
* code-path, testing any possible combination of disassembler configurations.
*/
#include <stddef.h> #include <stddef.h>
#include <stdio.h> #include <stdio.h>
#include <string.h> #include <string.h>
@ -36,6 +42,7 @@ typedef struct ZydisFuzzControlBlock_ {
int decoderFlags; int decoderFlags;
int formatterStyle; int formatterStyle;
int formatterFlags; int formatterFlags;
uint8_t bufSize;
} ZydisFuzzControlBlock; } ZydisFuzzControlBlock;
/* ============================================================================================== */ /* ============================================================================================== */
@ -75,6 +82,7 @@ int main()
} }
ZydisInstructionInfo info; ZydisInstructionInfo info;
char *outBuf = malloc(controlBlock.bufSize);
while (ZYDIS_SUCCESS(ZydisDecoderDecodeNextInstruction(&decoder, &info))) while (ZYDIS_SUCCESS(ZydisDecoderDecodeNextInstruction(&decoder, &info)))
{ {
if (info.flags & ZYDIS_IFLAG_ERROR_MASK) if (info.flags & ZYDIS_IFLAG_ERROR_MASK)
@ -83,10 +91,12 @@ int main()
continue; continue;
} }
char outBuf[256]; ZydisFormatterFormatInstruction(&formatter, &info, outBuf, controlBlock.bufSize);
ZydisFormatterFormatInstruction(&formatter, &info, outBuf, sizeof(outBuf));
puts(outBuf); puts(outBuf);
} }
free(outBuf);
return 0;
} }
/* ============================================================================================== */ /* ============================================================================================== */