This repo will not be maintained. Please use SymSan instead.

• Linux-amd64 (Tested on Ubuntu 18.04)
• LLVM 4.0.0 - 7.1.0 : run sudo apt install clang or PREFIX=/path-to-install ./build/install_llvm.sh.

If installed from source, append the following entries in the shell configuration file (~/.bashrc, ~/.zshrc).

export PATH=/path-to-clang/bin:$PATH export LD_LIBRARY_PATH=/path-to-clang/lib:$LD_LIBRARY_PATH 

The build script will resolve most dependencies and setup the runtime environment.

./build/build.sh

As with AFL, system core dumps must be disabled.

echo core | sudo tee /proc/sys/kernel/core_pattern

Running test from Angora

cd /path-to-angora/tests/mini ../../bin/ko-clang mini.c -o mini.taint python -c "print('A'*20)" > i TAINT_OPTIONS="taint_file=i" ./mini.taint i ./mini.taint id-0-0-0 

It doesn't support input growth yet so we need to use a large enough seed input. It also lacks a driver yet, so we need to manually run the newly generated test case(s).

Currently I've tested with bitflip, call_fn, call_fn2, call_fn3, cf1, context, gep, gep2, if_eq, infer_type, memcmp, mini, pointer, shift_and, sign, strcmp, strcmp2, switch and switch2.