1afl-cmin(8) System Manager's Manual afl-cmin(8)
2
3
4
6 afl-cmin
7
8
10 afl-cmin [ options ] -- /path/to/target_app [ ... ]
11
12
14 Required parameters:
15 -i dir - input directory with starting corpus
16 -o dir - output directory for minimized files
17
18 Execution control settings:
19 -f file - location read by the fuzzed program (stdin)
20 -m megs - memory limit for child process ( MB)
21 -t msec - run time limit for child process (none)
22 -O - use binary-only instrumentation (FRIDA mode)
23 -Q - use binary-only instrumentation (QEMU mode)
24 -U - use unicorn-based instrumentation (unicorn mode)
25
26 Minimization settings:
27 -C - keep crashing inputs, reject everything else
28 -e - solve for edge coverage only, ignore hit counts
29
30 For additional tips, please consult README.md
31
32 Environment variables used:
33 AFL_ALLOW_TMP: allow unsafe use of input/output directories under {/var}/tmp
34 AFL_CRASH_EXITCODE: optional child exit code to be interpreted as crash
35 AFL_FORKSRV_INIT_TMOUT: time the fuzzer waits for the forkserver to come up
36 AFL_KEEP_TRACES: leave the temporary <out_dir>/.traces directory
37 AFL_KILL_SIGNAL: Signal delivered to child processes on timeout (default: SIGKILL)
38 AFL_NO_FORKSRV: run target via execve instead of using the forkserver
39 AFL_PATH: path for the afl-showmap binary if not found anywhere in PATH
40 AFL_PRINT_FILENAMES: If set, the filename currently processed will be printed to stdout
41 AFL_SKIP_BIN_CHECK: skip afl instrumentation checks for target binary
42
43
44
46 afl++ was written by Michal "lcamtuf" Zalewski and is maintained by
47 Marc "van Hauser" Heuse <mh@mh-sec.de>, Heiko "hexcoder-" Eissfeldt
48 <heiko.eissfeldt@hexco.de>, Andrea Fioraldi <andreafioraldi@gmail.com>
49 and Dominik Maier <domenukk@gmail.com> The homepage of afl++ is:
50 https://github.com/AFLplusplus/AFLplusplus
51
52
54 Apache License Version 2.0, January 2004
55
56
57
58afl++ 2022-03-31 afl-cmin(8)