1afl-tmin(8)                 System Manager's Manual                afl-tmin(8)
2
3
4

NAME

6       afl-tmin
7
8

SYNOPSIS

10       afl-tmin [ options ] -- /path/to/target_app [ ... ]
11
12

OPTIONS

14       Required parameters:
15         -i file       - input test case to be shrunk by the tool
16         -o file       - final output location for the minimized data
17
18       Execution control settings:
19         -f file       - input file read by the tested program (stdin)
20         -t msec       - timeout for each run (1000 ms)
21         -m megs       - memory limit for child process (0 MB)
22         -O            - use binary-only instrumentation (FRIDA mode)
23         -Q            - use binary-only instrumentation (QEMU mode)
24         -U            - use unicorn-based instrumentation (Unicorn mode)
25         -W            - use qemu-based instrumentation with Wine (Wine mode)
26                         (Not necessary, here for consistency with other afl-* tools)
27
28       Minimization settings:
29         -e            - solve for edge coverage only, ignore hit counts
30         -x            - treat non-zero exit codes as crashes
31
32         -H            - minimize a hang (hang mode)
33       For additional tips, please consult docs/README.md.
34
35       Environment variables used:
36       AFL_CRASH_EXITCODE: optional child exit code to be interpreted as crash
37       AFL_FORKSRV_INIT_TMOUT: time spent waiting for forkserver during startup (in ms)
38       AFL_KILL_SIGNAL: Signal ID delivered to child processes on timeout, etc.
39                        (default: SIGKILL)
40       AFL_FORK_SERVER_KILL_SIGNAL: Kill signal for the fork server on termination
41                                    (default: SIGTERM). If unset and AFL_KILL_SIGNAL is
42                                    set, that value will be used.
43       AFL_MAP_SIZE: the shared memory size for that target. must be >= the size
44                     the target was compiled for
45       AFL_PRELOAD:  LD_PRELOAD / DYLD_INSERT_LIBRARIES settings for target
46       AFL_TMIN_EXACT: require execution paths to match for crashing inputs
47       AFL_NO_FORKSRV: run target via execve instead of using the forkserver
48       ASAN_OPTIONS: custom settings for ASAN
49                     (must contain abort_on_error=1 and symbolize=0)
50       MSAN_OPTIONS: custom settings for MSAN
51                     (must contain exitcode=86 and symbolize=0)
52       TMPDIR: directory to use for temporary input files
53
54

AUTHOR

56       afl++  was  written  by  Michal "lcamtuf" Zalewski and is maintained by
57       Marc "van Hauser" Heuse  <mh@mh-sec.de>,  Heiko  "hexcoder-"  Eissfeldt
58       <heiko.eissfeldt@hexco.de>,  Andrea Fioraldi <andreafioraldi@gmail.com>
59       and Dominik  Maier  <domenukk@gmail.com>  The  homepage  of  afl++  is:
60       https://github.com/AFLplusplus/AFLplusplus
61
62

LICENSE

64       Apache License Version 2.0, January 2004
65
66
67
68afl++                             2023-04-03                       afl-tmin(8)
Impressum