How to get seeds about optee_fuzzer HOT 4 CLOSED

fix the question like this

 // off += snprintf(&buf[off], sizeof(buf) - off, " attr %x { id: %x, a: %x, b: %x }\n", attrn, attr.attribute_id, attr.a, attr.b);
int from_len;
from_len = snprintf(&buf[off], sizeof(buf) - off, " attr %x { id: %x, a: %x, b: %x }\n", attrn, attr.attribute_id, attr.a, attr.b);

if( from_len < 0 || from_len > sizeof(buf) - off)
     goto end;　　
off += from_len;

from optee_fuzzer.

This is not a good question.
In the program.The optee_client/libteec/src/tee_client_api.c has been rewrite.
As normal ca/ta,It works likes before.
However,when we define variable AFL_TRACE_SVC .　The second ca/ta will record the trace,which may be used as seed.

from optee_fuzzer.

Hi @da1234cao I have the instrumentation not detected problem when running the fuzzer, any ideas?

from optee_fuzzer.

Undefined behavior out_of_bounds at core/kernel/afl_svc_trace.c:243 col 57

1. run command AFL_TRACE_SVC=/tmp xtest
2. in ca:regression_4006.25 Asym Crypto case 50 algo 0x60000030 line 2962
3. in ta,there is a question:cryp_obj_populate[30](238980, *40008580:c0, 8E/TC:0 0 Undefined behavior out_of_bounds at core/kernel/afl_svc_trace.c:243 col 57
   E/TC:0 0 Panic at core/kernel/ubsan.c:222 <__ubsan_handle_out_of_bounds>

from optee_fuzzer.