Windows Support for LibAFL-LibFuzzer #3130

novafacing · 2025-04-04T19:05:39Z

Description

Support for Windows with LibAFL-LibFuzzer. This is a draft with a couple issues still persisting.

No maps available when running fuzzer

Checklist

I have run ./scripts/precommit.sh and addressed all comments

…r libafl-libfuzzer

domenukk · 2025-04-04T19:50:00Z

libafl_libfuzzer/runtime/Cargo.toml.template

+
+[target.'cfg(not(windows))'.features]
+## Enable the `fork` feature on non-windows platforms
+default = ["fork", "tui_monitor"]


don't think we need tui_monitor on non-win

I have to put in a few libs anyway to get this to work so I'll just revert this part of the changes and make tui_monitor work.

Don't fully get the tui monitor thing - it's just not working on Win yet?

novafacing · 2025-04-04T22:59:13Z

This is in MVP working state now with some updates still needed:

It runs for a moment then panics at mutations.rs:1164 ("Corpus may not be empty!"). Unsure why.
Revert changes to cargo.toml and add import libs for required libraries
Fix argparsing so -help=1 works (maybe separate PR)

Howto test:

.\build.ps1 dev
cd test
# Write a test.cpp
cl /c /EHsc /std:c++17 /MDd /fsanitize=fuzzer-no-link test.cpp #(if you don't have fuzzer-no-link on Windows, use /fsanitize-coverage=inline-8bit-counters /fsanitize-coverage=edge /fsanitize-coverage=trace-cmp /fsanitize-coverage=trace-div` instead).
link test.obj ..\target\debug\afl_libfuzzer_runtime.lib /OUT:fuzzer.exe

domenukk · 2025-04-05T06:03:44Z

FWIW the fork feature should not do anything on windows

novafacing · 2025-04-07T16:03:14Z

This seems to be 100% working now! Just need to do a style pass.

tokatoka · 2025-04-07T16:06:37Z

Nice 💯
Can you create a CI job?
Just like this guy
https://github.com/AFLplusplus/LibAFL/blob/main/.github/workflows/build_and_test.yml#L515

novafacing · 2025-04-08T16:54:50Z

Ok, adding a CI workflow today or maybe tomorrow (I have actual work to do but it should be relatively quick).

domenukk · 2025-04-09T14:17:28Z

Nice 💯 Can you create a CI job? Just like this guy https://github.com/AFLplusplus/LibAFL/blob/main/.github/workflows/build_and_test.yml#L515

Please do a justfile entry that is easy to run locally

domenukk · 2025-04-09T14:18:04Z

We need to land #3099

tokatoka · 2025-04-17T21:02:50Z

do you have any update?

novafacing · 2025-04-22T21:15:20Z

Not yet, sorry :) I've been super busy with some other stuff. Still on my radar, I'll finish it up when I have a chance.

domenukk · 2025-05-13T01:06:40Z

Status? We're going to do a new release soon

domenukk · 2025-05-15T04:42:01Z

libafl_libfuzzer/runtime/Cargo.toml.template

 [features]
-default = ["fork"]
+default = []


I think fork as default is good for perf on non-windows, it's a nop on win

I have it set below that on non-windows to keep things explicit and because tui_monitor needs to be default on non-win anyway, but I can change it if wanted.

libafl_libfuzzer/runtime/src/options.rs

tokatoka · 2025-05-20T10:55:12Z

@novafacing any update?

novafacing · 2025-05-20T19:02:56Z

Ok, added. Let's see if I can one-shot the test working :)

.github/workflows/build_and_test.yml

novafacing · 2025-05-20T20:18:23Z

Ok, looks like test is passing so this is ready for a real look :)

domenukk · 2025-05-20T20:22:18Z

libafl_libfuzzer/runtime/src/fuzz.rs

+    destroy_output_fds(options);
+
+    fuzz_with!(options, harness, do_fuzz, |fuzz_single| {
+        let mgr = SimpleEventManager::new(MultiMonitor::new(create_monitor_closure()));


LibAFL_Libfuzzer doesn't support Llmp?

I guess it doesn't right now but no reason we couldn't add it. Could use llmp+multiprocessing on windows where we can't fork

domenukk · 2025-05-20T20:23:26Z

libafl_libfuzzer/runtime/src/options.rs

@@ -358,6 +363,47 @@ impl<'a> LibfuzzerOptionsBuilder<'a> {
                        }
                        "runs" => self.runs = parse_or_bail!(name, value, usize),
                        "close_fd_mask" => self.close_fd_mask = parse_or_bail!(name, value, u8),
+                        "help" => {


This will go out of date at some time but I don't have a good solution either

Yeah unfortunately using e.g. clap is blocked on clap-rs/clap#1210 and I don't know of another good arg parsing library that supports this arg format

domenukk · 2025-05-20T20:24:11Z

libafl_libfuzzer_runtime/build.ps1

@@ -0,0 +1,89 @@
+#!/usr/bin/env pwsh


Maybe call that guy from a justfile?

Good idea, I'll add a justfile for libafl_libfuzzer and libafl_libfuzzer_runtime.

domenukk · 2025-05-20T20:24:32Z

Looks pretty good, awesome!

…Linux

novafacing · 2025-05-20T23:16:07Z

Ok! I think we're good

Add windows build script and additional changes to support windows fo…

bacd235

…r libafl-libfuzzer

domenukk reviewed Apr 4, 2025

View reviewed changes

Update build scripts and harness wrapping directives

6a10ca6

Rowan Hart added 2 commits April 7, 2025 08:02

Resolve issue with corpus edge count calculation

839e422

Add help message and make fork do nothing on Windows

7a923b1

Rowan Hart added 6 commits April 7, 2025 09:57

Format harness_wrap.cpp

d8e2472

Clippy happiness pass

34a41f8

Clippy happiness pass

68b6478

Clippy happiness pass

17399fe

Correct logic

c45a9dc

Correct logic

cb2afd1

tokatoka added this to the LibAFL 1.0 milestone Apr 28, 2025

domenukk reviewed May 15, 2025

View reviewed changes

libafl_libfuzzer/runtime/src/options.rs Outdated Show resolved Hide resolved

Rowan Hart added 4 commits May 20, 2025 11:58

Update help output and make runs argument work

ff613eb

Add test for libafl_libfuzzer on windows

8c6210d

Add workflow for libafl_libfuzzer test

f4c1291

Fix copy without dependent task

6558263

Rowan Hart added 5 commits May 20, 2025 12:04

Add libafl_libfuzzer_windows to preflight list

a17baa4

Format harness

bc2f70b

Explicitly ignore windows fuzzer

599dea0

Remove windows-specific copy from unix instructions

5dc689e

Ensure using nightly

5dd2bfd

tokatoka reviewed May 20, 2025

View reviewed changes

.github/workflows/build_and_test.yml Outdated Show resolved Hide resolved

tokatoka reviewed May 20, 2025

View reviewed changes

.github/workflows/build_and_test.yml Outdated Show resolved Hide resolved

Fix job name

a7d70d2

novafacing marked this pull request as ready for review May 20, 2025 20:18

domenukk approved these changes May 20, 2025

View reviewed changes

domenukk reviewed May 20, 2025

View reviewed changes

Rowan Hart added 2 commits May 20, 2025 14:55

Update build to use libFuzzer.lib on Windows to keep consistent with …

6d47b67

…Linux

Remove nightly requirement

0b7c082

domenukk merged commit 0b25d72 into AFLplusplus:main May 20, 2025
110 checks passed

novafacing deleted the libafl-libfuzzer-windows branch May 20, 2025 23:38

Uh oh!

Windows Support for LibAFL-LibFuzzer #3130

Windows Support for LibAFL-LibFuzzer #3130

Uh oh!

Conversation

novafacing commented Apr 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Checklist

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

novafacing commented Apr 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

domenukk commented Apr 5, 2025

Uh oh!

novafacing commented Apr 7, 2025

Uh oh!

tokatoka commented Apr 7, 2025

Uh oh!

novafacing commented Apr 8, 2025

Uh oh!

domenukk commented Apr 9, 2025

Uh oh!

domenukk commented Apr 9, 2025

Uh oh!

tokatoka commented Apr 17, 2025

Uh oh!

novafacing commented Apr 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

domenukk commented May 13, 2025

Uh oh!

domenukk May 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

tokatoka commented May 20, 2025

Uh oh!

novafacing commented May 20, 2025

Uh oh!

Uh oh!

Uh oh!

novafacing commented May 20, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

domenukk commented May 20, 2025

Uh oh!

novafacing commented May 20, 2025

Uh oh!

Uh oh!

Uh oh!

novafacing commented Apr 4, 2025 •

edited

Loading

novafacing commented Apr 4, 2025 •

edited

Loading

novafacing commented Apr 22, 2025 •

edited

Loading

domenukk May 15, 2025 •

edited

Loading