Skip to content

Latest commit

 

History

History
96 lines (79 loc) · 4.15 KB

README.md

File metadata and controls

96 lines (79 loc) · 4.15 KB

libxml2

Download Instructions

Similar to PerfFuzz we use version 2.9.7 of libxml2. The source file is provided here for reference under the src directory. However, if you wish to download the source file yourself, you can try this link, or you can search for the same version in libxml2's sources archive.

Application Stats

$ cloc --not-match-f=test .
    3748 text files.
    3135 unique files.                                          
    2861 files ignored.

github.com/AlDanial/cloc v 1.70  T=13.32 s (105.1 files/s, 39006.8 lines/s)
-------------------------------------------------------------------------------
Language                     files          blank        comment           code
-------------------------------------------------------------------------------
C                               89          19324          49549         162183
XML                            679           2721           1899          73165
HTML                           248           1319            225          64563
C/C++ Header                    73           3239           4796          29188
Bourne Shell                    16           4527           4832          26974
Python                          59           3460           7448          18663
m4                               9           1158            265          11111
XHTML                            3            583             22           5430
XSD                            155            532            324           5132
DTD                             30           1260           2770           4187
XSLT                            16            192            155           4067
make                            11            220             67           2003
JavaScript                       1             25             48            635
PHP                              4             14              1            512
DOS Batch                        2             49              0            209
Clean                            1             11              0            168
Perl                             2             16              0             69
CSS                              1              0              0             66
-------------------------------------------------------------------------------
SUM:                          1399          38650          72401         408325
-------------------------------------------------------------------------------

We only count code of C, C++, and C/C++ Headers (given test files are excluded). Thus, 162,183 + 29,188 = 191,371 SLoC.

Manually Build the Source Code

After decompressing the file tar -xvf libxml2-2.9.7.tar.gz, and within the new directory, use AFL's compiler to generate the appropriate Makefile.

CC=/home/git/perffuzz/afl-clang-fast ./configure --disable-shared

We use the flag --disable-shared to compile in a static library mode.

Then run

make

If things compiled successfully, then you should find a file call xmllint which is the source file we use to run tests.

Sample Run Without Fuzzing

To test the that the installation was successfully completed. You can run xmllint based on seed1.xml (shown below) by simply passing the file to libxml2 ./xmllint sample.dot. A correct run should result on the same xml file being printed. The file seed1.xml is based on the example given in libxml2 documentation.

<?xml version="1.0"?>
<story>
  <storyinfo>
    <author>John Fleck</author>
    <datewritten>June 2, 2002</datewritten>
    <keyword>example keyword</keyword>
  </storyinfo>
  <body>
    <headline>This is the headline</headline>
    <para>This is the body text.</para>
  </body>
</story>

Run With AFL

To manually run the AFL listener on the target application you use a command similar to the one below.

afl-socket -i /home/treeline/target_apps/libxml2/inputs/ -o /home/results/libxml2-001 -p -N 500 -d /home/treeline/target_apps/libxml2/src/libxml2-2.9.7/xmllint @@