1afl-cmin(8)                 System Manager's Manual                afl-cmin(8)
2
3
4

NAME

6       afl-cmin
7
8

SYNOPSIS

10       afl-cmin [ options ] -- /path/to/target_app [ ... ]
11
12

OPTIONS

14       Required parameters:
15         -i dir        - input directory with starting corpus
16         -o dir        - output directory for minimized files
17
18       Execution control settings:
19         -T tasks      - how many parallel tasks to run (default: 1, all=nproc)
20         -f file       - location read by the fuzzed program (stdin)
21         -m megs       - memory limit for child process ( MB)
22         -t msec       - run time limit for child process (default: 5000)
23         -O            - use binary-only instrumentation (FRIDA mode)
24         -Q            - use binary-only instrumentation (QEMU mode)
25         -U            - use unicorn-based instrumentation (unicorn mode)
26         -X            - use Nyx mode
27
28       Minimization settings:
29         -A            - allow crashes and timeouts (not recommended)
30         -C            - keep crashing inputs, reject everything else
31         -e            - solve for edge coverage only, ignore hit counts
32
33       For additional tips, please consult README.md
34
35       Environment variables used:
36       AFL_CRASH_EXITCODE: optional child exit code to be interpreted as crash
37       AFL_FORKSRV_INIT_TMOUT: time the fuzzer waits for the forkserver to come up
38       AFL_KEEP_TRACES: leave the temporary <out_dir>/.traces directory
39       AFL_KILL_SIGNAL: Signal delivered to child processes on timeout (default: SIGKILL)
40       AFL_FORK_SERVER_KILL_SIGNAL: Signal delivered to fork server processes on
41          termination (default: SIGTERM). If this is not set and AFL_KILL_SIGNAL is
42          set, this will be set to the same value as AFL_KILL_SIGNAL.
43       AFL_NO_FORKSRV: run target via execve instead of using the forkserver
44       AFL_CMIN_ALLOW_ANY: write tuples for crashing inputs also
45       AFL_PATH: path for the afl-showmap binary if not found anywhere in PATH
46       AFL_PRINT_FILENAMES: If set, the filename currently processed will be printed to stdout
47       AFL_SKIP_BIN_CHECK: skip afl instrumentation checks for target binary
48
49
50

AUTHOR

52       AFL++  was  written  by  Michal "lcamtuf" Zalewski and is maintained by
53       Marc    "van    Hauser"    Heuse    <mh@mh-sec.de>,    Dominik    Maier
54       <domenukk@gmail.com>,  Andrea  Fioraldi  <andreafioraldi@gmail.com> and
55       Heiko "hexcoder-" Eissfeldt <heiko.eissfeldt@hexco.de> The homepage  of
56       AFL++ is: https://github.com/AFLplusplus/AFLplusplus
57
58

LICENSE

60       Apache License Version 2.0, January 2004
61
62
63
64AFL++                             2023-08-29                       afl-cmin(8)
Impressum