Crate libafl_frida

Source
Expand description

The Frida executor is a binary-only mode for LibAFL.

It can report coverage and, on supported architectures, even reports memory access errors.

Additional documentation is available in the LibAFL book.

§Feature Flags

§General Features

  • cmplog — Enables cmplog, a mode that logs comparisons. This increases runtime overhead but also increases the fuzzer’s solving capabilities. Should be used on some cores.
  • serdeany_autoreg (enabled by default) — Automatically register all types with LibAFL’s serializer. There’s hardly a reason not to use this.
  • track_hit_feedbacks — If hit feedbacks should be tracked as part of LibAFL’s feedback.
  • auto-download (enabled by default) — If Frida should be automatically downloaded (else you’ll have to provide a Frida version to use manually)

Modules§

allocator
The frida-asan allocator
asan
Address sanitization using frida
cmplog_rt
The FRIDA CmpLog runtime
coverage_rt
Functionality regarding binary-only coverage collection.
drcov_rt
Generates DrCov traces
executor
The frida executor
frida_helper_shutdown_observer
The frida helper shutdown observer, needed to remove the instrumentation upon crashing
helper
The LibAFL frida helper
utils
Utilities

Structs§

FridaOptions
A representation of the various Frida options