commit 6404abd7d609350ffd6c6f221cbf56e60b2ef030
author van Hauser <vh@thc.org> Mon Sep 07 17:30:28 2020 +0200
committer van Hauser <vh@thc.org> Mon Sep 07 17:30:28 2020 +0200
tree 5e81ba7c8fc92bb26bdd6847027ef4feec6042fa
parent 7bcbfd48e54eba5a99d05b04f4f3d6bea29cde80

bugfix for fixed seeds

src/afl-fuzz-queue.c

diff --git a/src/afl-fuzz-queue.c b/src/afl-fuzz-queue.c
index 8c7bfc5..336b7f4 100644
--- a/src/afl-fuzz-queue.c
+++ b/src/afl-fuzz-queue.c
@@ -502,7 +502,7 @@
   // Longer execution time means longer work on the input, the deeper in
   // coverage, the better the fuzzing, right? -mh
 
-  if (afl->schedule >= RARE && likely(!afl->fixed_seed)) {
+  if (likely(afl->schedule < RARE) && likely(!afl->fixed_seed)) {
 
     if (q->exec_us * 0.1 > avg_exec_us) {
 

src/afl-fuzz-stats.c

diff --git a/src/afl-fuzz-stats.c b/src/afl-fuzz-stats.c
index dfc0cd9..1d5b169 100644
--- a/src/afl-fuzz-stats.c
+++ b/src/afl-fuzz-stats.c
@@ -1022,7 +1022,11 @@
 
   /* Let's keep things moving with slow binaries. */
 
-  if (avg_us > 50000) {
+  if (unlikely(afl->fixed_seed)) {
+
+    afl->havoc_div = 1;
+
+  } else if (avg_us > 50000) {
 
     afl->havoc_div = 10;                                /* 0-19 execs/sec   */
 
@@ -1093,7 +1097,11 @@
        random scheduler jitter is less likely to have any impact, and because
        our patience is wearing thin =) */
 
-    if (avg_us > 50000) {
+    if (unlikely(afl->fixed_seed)) {
+
+      afl->fsrv.exec_tmout = avg_us * 5 / 1000;
+
+    } else if (avg_us > 50000) {
 
       afl->fsrv.exec_tmout = avg_us * 2 / 1000;