You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
When using ForkServerBuilder.shmem_provider(), this resets some of the fields already configured. E.g., the kill signal is reset to its default value: https://github.com/AFLplusplus/LibAFL/blob/main/libafl/src/executors/forkserver.rs#L1326
When the child processes encounters a timeout, the child is killed with the default value (sigterm). This might be insufficient, an causes a hang in the following situation:
child executes a long-running input
fuzzer detects a timeout, about to send sigterm (sigkill was configured, but reset by shmem_provider to sigterm)
child issues the sigstop persistent mode signal
fuzzer requests new child from forkserver, tells forkserver that the child needs to be reaped bc it was killed
forkserver waitpids for child
because the child hasn't been terminated properly, the forkserver waitpids indefinitely
because the forkserver is not delivering a new child pid, the fuzzer waits indefinitely
The text was updated successfully, but these errors were encountered:
Describe the bug
When using
ForkServerBuilder.shmem_provider()
, this resets some of the fields already configured. E.g., the kill signal is reset to its default value: https://github.com/AFLplusplus/LibAFL/blob/main/libafl/src/executors/forkserver.rs#L1326When the child processes encounters a timeout, the child is killed with the default value (sigterm). This might be insufficient, an causes a hang in the following situation:
shmem_provider
to sigterm)The text was updated successfully, but these errors were encountered: