[Question][Hw4] About seed_1 in json_seed

[ee12ha0220]

My fuzzer crashes if I give seed_1.json as an input. But from what I understand about seed corpus, it has to contain only valid inputs. Am I getting something wrong? Thank you :)

[Standchen]

The input in seed_1.json results in Divide-by-zero detected at line 492 and col 43 (with instrumented binary), and you can see that it is intended divide-by-zero statement.

[ee12ha0220]

Yes I can see that. But as I mutate seed_1.json and run the program, it keeps on generating crash and in output_dir/crash there is like 40 files generated when I run the code for 1 second. Am I doing the right thing?

[Standchen]

You'll get tens of thousands crashes as your fuzzer runs I guess, since mine does too.

[ee12ha0220]

Oh I see, then how should I specify a unique crash?

[Standchen]

In my case, I just crafted simple python/bash scripts to run each input in output_dir/crash/*.

[ee12ha0220]

Thanks a lot!