1afl-tmin(8)                 System Manager's Manual                afl-tmin(8)
2
3
4

NAME

6       afl-tmin
7
8

SYNOPSIS

10       afl-tmin [ options ] -- /path/to/target_app [ ... ]
11
12

OPTIONS

14       Required parameters:
15         -i file       - input test case to be shrunk by the tool
16         -o file       - final output location for the minimized data
17
18       Execution control settings:
19         -f file       - input file read by the tested program (stdin)
20         -t msec       - timeout for each run (1000 ms)
21         -m megs       - memory limit for child process (0 MB)
22         -O            - use binary-only instrumentation (FRIDA mode)
23         -Q            - use binary-only instrumentation (QEMU mode)
24         -U            - use unicorn-based instrumentation (Unicorn mode)
25         -W            - use qemu-based instrumentation with Wine (Wine mode)
26                         (Not necessary, here for consistency with other afl-* tools)
27         -X            - use Nyx mode
28
29       Minimization settings:
30         -e            - solve for edge coverage only, ignore hit counts
31         -x            - treat non-zero exit codes as crashes
32
33         -H            - minimize a hang (hang mode)
34       For additional tips, please consult docs/README.md.
35
36       Environment variables used:
37       AFL_CRASH_EXITCODE: optional child exit code to be interpreted as crash
38       AFL_FORKSRV_INIT_TMOUT: time spent waiting for forkserver during startup (in ms)
39       AFL_KILL_SIGNAL: Signal ID delivered to child processes on timeout, etc.
40                        (default: SIGKILL)
41       AFL_FORK_SERVER_KILL_SIGNAL: Kill signal for the fork server on termination
42                                    (default: SIGTERM). If unset and AFL_KILL_SIGNAL is
43                                    set, that value will be used.
44       AFL_MAP_SIZE: the shared memory size for that target. must be >= the size
45                     the target was compiled for
46       AFL_PRELOAD:  LD_PRELOAD / DYLD_INSERT_LIBRARIES settings for target
47       AFL_TMIN_EXACT: require execution paths to match for crashing inputs
48       AFL_NO_FORKSRV: run target via execve instead of using the forkserver
49       ASAN_OPTIONS: custom settings for ASAN
50                     (must contain abort_on_error=1 and symbolize=0)
51       MSAN_OPTIONS: custom settings for MSAN
52                     (must contain exitcode=86 and symbolize=0)
53       TMPDIR: directory to use for temporary input files
54
55

AUTHOR

57       AFL++  was  written  by  Michal "lcamtuf" Zalewski and is maintained by
58       Marc    "van    Hauser"    Heuse    <mh@mh-sec.de>,    Dominik    Maier
59       <domenukk@gmail.com>,  Andrea  Fioraldi  <andreafioraldi@gmail.com> and
60       Heiko "hexcoder-" Eissfeldt <heiko.eissfeldt@hexco.de> The homepage  of
61       AFL++ is: https://github.com/AFLplusplus/AFLplusplus
62
63

LICENSE

65       Apache License Version 2.0, January 2004
66
67
68
69AFL++                             2023-08-29                       afl-tmin(8)
Impressum