Harrison Green

Dealing with external libraries

1

Hi, some of the targets I'm building require some third party libraries. For example, I'm trying to compile NestFuzz for the freetype2 benchmark (i.e. in fuzzbench) which is trying to...

Experiment request: frameshift

21

Hi, I'm interested in evaluating a fork of LibAFL and AFL++ (`frameshift` variant). Would you be able to run the following experiment: ``` /gcbrun run_experiment.py -a --experiment-config /opt/fuzzbench/service/experiment-config.yaml --experiment-name 2025-05-20-frameshift...

Hi, there is a potential bug in `Json::Reader::parse` where it stores dangling pointers to the string, read back during `getFormattedErrorMessages`. This bug was reproduced on https://github.com/open-source-parsers/jsoncpp/commit/ca98c98457b1163cca1f7d8db62827c115fec6d1. ### Description When invoking...

Hi, it looks like `ccv_bfloat_to_double` is implemented incorrectly. Specifically, this is the current implementation: https://github.com/liuliu/ccv/blob/a1a8e06afe7d40d1f053f494da602f9a72c41617/lib/ccv_util.c#L1819-L1830 Inside the loop, it always unconditionally accesses `h[1]` (i.e. the same element is repeatedly converted...

Hi, it seems like there is a trivial buffer overflow (read) in `ccv_move`. As far as I can tell, this overflow happens in most uses with nonzero `x` and `y`...

Hi, the following testcase sets up an encoder and decoder table for round-trip compression. The compression side works fine, however it crashes in `FSE_decompress_usingDTable` while trying to decompress the data....

Hi, the following testcase causes a stack-buffer-underflow (read) in `FSE_compress2`. It's possible that the user-provided `tableLog` (here 5) is too small fo the alphabet, but in that case I would...

Hi, the following testcase constructs an input (of repeated zeros) and builds a `CTable` to compress it. However, invoking `FSE_compress_usingCTable` results in a heap overflow (write). As far as I...

Segfault in uc_ctl_request_cache with `UC_ARCH_MIPS`

2

Hi, using `uc_ctl_request_cache` with `UC_ARCH_MIPS` results in a segfault. Interestingly this seems to only happen on MIPS (both 32 and 64 bit). Tested on the most recent commit `c24c9ebe`. (found...

Integrate FrameShift

17

This PR adds support for FrameShift (https://arxiv.org/pdf/2507.05421) It can be enabled at runtime by setting the env var `AFL_FRAMESHIFT_ENABLED=1`. ## Overview FrameShift analysis runs once per newly discovered corpus entry...