Input file extension

[googleprojectzero]

Input file extension

[ifratric]

Hi, the filename is constructed here:

Jackalope/fuzzer.cpp

Line 959 in 9e9dfa5

string outfile = DirJoin(out_dir, string("input_") + std::to_string(tc->thread_id));

So you can change that line to something like
string outfile = DirJoin(out_dir, string("input_") + std::to_string(tc->thread_id) + string(".ext"));

[hdbreaker]

I already identify the line but the problem is that I’m fuzzing multi format file extensions, so I need a way to dynamically change the extension, and not fixed to an specific extension

[ifratric]

In that case, you can try, before DeliverSample() call here:

Jackalope/fuzzer.cpp

Line 224 in 9e9dfa5

if (!tc->sampleDelivery->DeliverSample(sample)) {

do the following:

• compute the new file name with extension (based on content of the sample?)
• call ((FileSampleDelivery*)(tc->sampleDelivery))->SetFilename(...)
• replace the filename in the correct place in tc->target_argv

An easier option though would be to have one fuzzer instance per extension. If you want them to share corpus/coverage set, you can have all instances connect to the same coverage server.

[hdbreaker]

I was able to fix it just adding a dumb extension! thank you so much!