1afl-showmap(8)              System Manager's Manual             afl-showmap(8)
2
3
4

NAME

6       afl-showmap
7
8

SYNOPSIS

10       afl-showmap [ options ] -- /path/to/target_app [ ... ]
11
12

OPTIONS

14       Required parameters:
15         -o file    - file to write the trace data to
16
17       Execution control settings:
18         -t msec    - timeout for each run (none)
19         -m megs    - memory limit for child process (0 MB)
20         -O         - use binary-only instrumentation (FRIDA mode)
21         -Q         - use binary-only instrumentation (QEMU mode)
22         -U         - use Unicorn-based instrumentation (Unicorn mode)
23         -W         - use qemu-based instrumentation with Wine (Wine mode)
24                      (Not necessary, here for consistency with other afl-* tools)
25
26       Other settings:
27         -i dir     - process all files below this directory, must be combined with -o.
28                      With -C, -o is a file, without -C it must be a directory
29                      and each bitmap will be written there individually.
30         -C         - collect coverage, writes all edges to -o and gives a summary
31                      Must be combined with -i.
32         -q         - sink program's output and don't show messages
33         -e         - show edge coverage only, ignore hit counts
34         -r         - show real tuple values instead of AFL filter values
35         -s         - do not classify the map
36         -c         - allow core dumps
37
38       This tool displays raw tuple data captured by AFL instrumentation.
39       For additional help, consult docs/README.md.
40
41       Environment variables used:
42       LD_BIND_LAZY: do not set LD_BIND_NOW env var for target
43       AFL_CMIN_CRASHES_ONLY: (cmin_mode) only write tuples for crashing inputs
44       AFL_CMIN_ALLOW_ANY: (cmin_mode) write tuples for crashing inputs also
45       AFL_CRASH_EXITCODE: optional child exit code to be interpreted as crash
46       AFL_DEBUG: enable extra developer output
47       AFL_FORKSRV_INIT_TMOUT: time spent waiting for forkserver during startup (in milliseconds)
48       AFL_KILL_SIGNAL: Signal ID delivered to child processes on timeout, etc. (default: SIGKILL)
49       AFL_MAP_SIZE: the shared memory size for that target. must be >= the size the target was compiled for
50       AFL_PRELOAD: LD_PRELOAD / DYLD_INSERT_LIBRARIES settings for target
51       AFL_PRINT_FILENAMES: If set, the filename currently processed will be printed to stdout
52       AFL_QUIET: do not print extra informational output
53       AFL_NO_FORKSRV: run target via execve instead of using the forkserver
54
55

AUTHOR

57       afl++  was  written  by  Michal "lcamtuf" Zalewski and is maintained by
58       Marc "van Hauser" Heuse  <mh@mh-sec.de>,  Heiko  "hexcoder-"  Eissfeldt
59       <heiko.eissfeldt@hexco.de>,  Andrea Fioraldi <andreafioraldi@gmail.com>
60       and Dominik  Maier  <domenukk@gmail.com>  The  homepage  of  afl++  is:
61       https://github.com/AFLplusplus/AFLplusplus
62
63

LICENSE

65       Apache License Version 2.0, January 2004
66
67
68
69afl++                             2022-03-31                    afl-showmap(8)
Impressum