Hacker News new | ask | show | jobs
by TonyTrapp 1831 days ago
AFL++ already does that (it scans occurrences of strcmp, memcmp, etc. for magic values). The problem here might rather be that those magic constants are not expected to show up in the bit stream being read, but rather being the result of a calculation. If the result of a calculation must be 42 for a function to continue its execution, it's not so useful to have 42 in the fuzzer dictionary. If 42 is expected to be read from the file instead, it's easier and a dictionary will help.