| 2023-09-21 - Version 2.6 |
| - Pastis patch |
| - env NO_COLOR support |
| - fix problems with linux/bfd ```init_disassemble_info``` |
| - Support ```--exit_on_time``` |
| - ```strlcat``` supported in libhfuzz/memorycmp |
| - Some patches for MacOSX, sadly no support for ARM yet |
| - added missing ```add missing disassemble_free_target()``` |
| - using ```rfork()``` under FreeBSD |
| - support for enabling/disabling ASLR under FreeBSD |
| |
| 2022-01-01 - Version 2.5 |
| - fixed build for Android NDK >= 23 |
| - fixed build for CygWin |
| - improved hfuzz-cc, so it supports -x<language> correctly |
| - error returned if unknown cmd-line parameters are provided |
| - support for thread CPU pinning |
| - various fixes for *BSD |
| - increased number of dictionary entries (to 8192) |
| |
| 2021-02-24 - Version 2.4 |
| - better NetBSD support (compatiblity) |
| - fixed mangle_getLen() #360 |
| - disabled --linux_net_ns by default, as the Linux kernel dies under heavy load of new net namespaces |
| - added support for address compression in IntelPT mode |
| - simplified input_skipFactor() which now yields better results (faster coverage acquisition) |
| - added --save_smaller for the use with Rust fuzzing |
| - fixed Android build under MacOSX |
| - simplified some mangle() functions |
| |
| 2020-07-22 - Version 2.3 |
| - honggfuzz.h - split run_t into substructs |
| - clang-format options in .clang-format |
| - added missing mutex initializers |
| - removed unncessary comparisons to 'true' and 'false' |
| - improved NetBSD compatibility |
| - removed unnecessary memory fences (speed ups) |
| - faster searching through the binary for const 4/8-byte values |
| - removed unnecessary includes with iwyu |
| - libhfnetdriver - general improvements around local socket fuzzing and timeouts |
| |
| 2020-04-24 - Version 2.2 |
| - Added 8bitcnt instrumentation - use hfuzz-cc/hfuzz-8bitcnt-(gcc|clang) for that |
| - PC-guard instrumentation now uses edge counting |
| - --experimental_const_feedback is now set to true by default |
| - additional string instrumentation wrappers: glib, lcms |
| - additional mutators: splicing, changing ascii numbers |
| - additional integer comparison instrumentation (adding integers to the dynamic dictionary) |
| - fixed linking with ld.lld |
| - removed `sanitizer-coverage-prune-blocks` from hfuzz-cc.c |
| - most mutators have now either overwrite or insert versions |
| - fixed memory barriers in libhfuzz/ |
| - implemented skip_factor which dictates how often a given input is fuzzed |
| - lowered the default timeout to 1 second |
| - honggfuzz now uses microseconds, instead of milliseconds across the code |
| - added some new functions to libhfcommon/files |
| - enabled more aggressive inlining in hfuzz-cc/ |
| - fixed compilation dependency under MacOS X |
| |
| 2020-03-03 - Version 2.1 |
| - string/int comparison enabled for targets built with *SAN, but w/o hfuzz-cc |
| - Parallel work made faster by using faster ATOMIC constructs (check first, then update) |
| - Implement --experimental_const_feedback - const string/integer feedback (used as an additional dictionary) |
| - Sanitizer report files are "better"-deleted (i.e. based on PID and not TID) |
| - New patches for fuzzing added (e.g. for bind-9.16.0/9.15.7) |
| - Buffered output enabled in display.c |
| - Some functions moved from per-arch arch.c to common subproc.c |
| - Compilation under MacOS X 10.15 (Catalina) is now supported |
| - Added suport for bfd/binutils-2.33 |
| |
| 2019-12-07 - Version 2.0 |
| - Coverage-based corpus minimizer with '-M' |
| - QEmu mode: coverage feedback for Linux binaries |
| - *SAN sanitizer stack-parsing improved for Linux and for POSIX |
| - Move signal functionality to libhfcommon/ |
| - Fixed Android builds with newer unwind and capstone |
| - NetDriver: more functionality - e.g. specifying custom addresses and custom tmpfs mount points |
| - Examples: for /usr/bin/file, newer ISC Bind patch, improved OpenSSL code |
| |
| 2019-05-22 - Version 1.9 |
| - Don't include netdriver if not needed |
| - Updated examples (bind/openssl) |
| - Add missing TEMP_FAILURE_RETRY() wrappers |
| - Add additional _HF_STATE_DYNAMIC_SWITCH_TO_MAIN state |
| |
| 2019-02-23 - Version 1.8 |
| - Native support for NetBSD |
| - Multiple smaller changes wrt threading - e.g. introducing the signal thread |
| - Removed the support for -p (pid fuzzing), honggfuzz net driver, or persistent fuzzing mode should be used instead |
| - Reimplementation of memory comparison routines, now verified with glibc's test-suite |
| - Improved hfuzz-cc/clang/gcc - e.g. for the MacOSX platform, also using -fno-sanitize=fuzzer if -fsanitize=fuzzer is specified, + some samba code wrappers |
| - Examples: new corpora for some of those, new patch for ISC Bind (9.13.5) |
| |
| 2018-08-23 - Version 1.7 |
| - Native support for NetBSD |
| - ASCII only fuzzing |
| - Updated corpora for ISC Bind |
| - Printing final stats upon exit |
| - Refreshed support for Intel PT |
| - Support for __sanitizer_cov_trace_div |
| - Updated fuzzing examples for OpenSSL |
| |
| 2018-04-19 - Version 1.6 (rev aeaad48) |
| - Fixed Dockerfile |
| - Fixed a few format problems with file reporting |
| - Updated display formatting |
| - Make it work under WSL (Windows Subsystem for Linux) |
| |
| 2018-02-22 - Version 1.5 (rev 3b1b70b) |
| - Persistent fuzzing now works with MacOS-X |
| - Fixed some examples/ to make it work with MacOS-X |
| - Should compile cleanly with newer MacOS-X versions |
| |
| 2018-02-07 - Version 1.4 (rev 28c7d9e) |
| - Socketfuzzer by @dobin |
| - TCP fuzzer (HonggFuzzer NetDriver) in libhfnetdriver |
| - Display: changed layout a bit |
| - Fix some compilation isuses for MacOS-X |
| - Make it compile with OpenBSD |
| - Better examples/ dir: Apache HTTP, ISC Bind |
| - Added persistent and netdriver signatures |
| - Added missing symbols for newer -fsanitize-coverage (const) |
| - Changed internal structures (global vs run) |
| - Android: Make it compile with newer SDKs |
| |
| 2017-12-09 - Version 1.3 (rev dd9f149) |
| - Software instrumentation - support for cmp_const __sanitizer_cov_trace_const funcs |
| - Refreshed (mostly) OpenSSL corpora |
| - Mangling: additional function for ASCII numbers |
| - Support for RLIMIT_DATA limiting |
| - Better UI scrolling |
| - Simplified Intel PT decoder |
| - Removed defer{} / fblocks from libhfuzz |
| - Google-style intendation with clang-format |
| - Faster locks over global corpora of files |
| |
| 2017-11-01 - Version 1.2 (rev 8e04633) |
| - Software-based coverage feedback (-z) is now enabled by default, can be disabled with (-x) |
| - Better sigprocmask manipulation before executing a process |
| - Updated fuzzing corpora for ssl packages |
| - Updated Apache HTTPD compilation script/patch, corpora, config and string instrumentation |
| - Updated ISC Bind config and fuzzing corpora |
| - Fixes for the Android build (thanks to Zach Riggle and Anestis Bechtsoudis) |
| - Indentation fixes, now clang-format is used |
| |
| 2017-06-23 - Version 1.1 (rev ee3a530) |
| - Simplified and improved hfuzz_cc compiler |
| - More string instrumentation in libhfuzz |
| - Android: works with Android-NDK 15 and newer only |
| - Dockerfile |
| - Refreshed docs |
| - Linux: Faster BTS/PT due to less PMU state resets |
| - Linux: tests and by-pass for the Linux' fork-when-multithreaded problem |
| - libFuzzer/AFL style dictionaries |
| - Runnable under docker/oss-fuzz |
| |
| 2017-05-23 - Version 1.0 (rev 4332ae9) |
| - Multiple stability improvements for most of the supported architectures |
| - More examples in examples/ (e.g. Linux kernel IP for BTS/PT) |
| - Documentation updates |
| - Added honggfuzz compiler wrapper in hfuzz_cc/ |
| - Reworked buffer mangling logic |
| |
| 2016-02-14 - Version 0.9 (rev b0d1118) |
| - Clang >= 4.0 -fsanitize-coverage=trace-pc-guard,indirect-calls,trace-cmp support |
| - Multiple examples in examples/ |
| - --pprocess_cmd for input post-processing |
| |
| 2016-09-01 - Version 0.8 (rev 6b9efac) |
| - Clang >= 4.0 -fsanitize-coverage=trace-pc,indirect-calls,trace-cmp support |
| - GCC/Clang -finstrument-functions support |
| - Persistent fuzzing mode (-P) for Linux and POSIX |
| - Mutiple smaller fixes (display, stability) |
| |
| 2016-03-15 - Version 0.7 (rev 6d01e82) |
| - Asan code-coverage (SANCOV) available for all platforms (incl. Windows) |
| - Support for Intel PT under Linux v4.0 and newer (and Broadwell/Skylake/newer Intel CPUs) |
| - Should work under: Linux, FreeBSD, Mac OS X, Windows/Cygwin, possibly other POSIX-compliant systems |
| |
| 2015-08-14 - Version 0.6 (rev aa61adb) |
| - Improvements to feedback-driven fuzzing. Using bloom-style filter to record branches (much faster). |
| - Using multiple hardware-assisted feedback signals at once. |
| - Multiple small things: usage notes, logging |
| |
| 2015-02-26 - Version 0.5 (revision 284) |
| - Feedback-driven fuzzing on Linux (using Intel's BTS with Linux perf infrastructure for branch counting) (-Dp option) |
| - Compiles cleanly and works under FreeBSD 10.1 |
| - Uses libbfd/libunwind (under Linux) to disassemble offending instructions |
| - Many smaller fixes |
| |
| 2015-02-01 - Version 0.4 (revision 72) |
| - Switch from udis86 to capstone (Capstone is available in many Linux distros as opposed to udis86) |
| - OSX 10.10 support |
| - Many smaller fixes (esp. for MacOS) |
| |
| 2011-07-02 - Version 0.3 (revision 37) |
| - Honggfuzz now allows attaching to an external process (-p) (Linux only) |
| - -f no longer required when -c (external command) is specified |
| - Smaller fixes (typos) |
| |
| 2011-06-02 - Version 0.2 (revision 26) |
| - MacOS fixes (parsing DiagnosticReports) - solves http://code.google.com/p/honggfuzz/issues/detail?id=2 |
| - getopt() returns 'int' and not 'char' (could hang the process in a forever-loop) |
| - Formatting changes |
| - Updated comments/usage |
| |
| 2010-12-13 - Initial release 0.1 (revision 13) |
