American fuzzy lop is a fuzzer that employs a novel type of compile-time
instrumentation and genetic algorithms to automatically discover clean,
interesting test cases that trigger new internal states in the targeted
binary. This substantially improves the functional coverage for the
fuzzed code.
WWW: http://lcamtuf.coredump.cx/afl/
===> The following configuration options are available for afl-2.52_4:
DEBUG=off: Build with debugging support
DOCS=on: Build and/or install documentation
LLVM=on: LLVM-based instrumentation
===> Use 'make config' to modify these settings
cleanup: Remove expired ports:
2022-03-31 security/revealrk: Deprecate, marked BROKEN on 12+ in 2018
2022-03-31 devel/apache-commons-modeler: Abandoned upstream, last release in
2013
2022-03-31 security/afl: Abandoned upstream, no new release since 2017. Please
consider using security/afl++ instead
2022-03-31 www/mod_line_edit: Abandoned upstream, last release in 2006, Apache
includes mod_sed
2022-03-31 www/myfaces: Unsupported by upstream, released in 2005
2022-03-31 www/mod_backtrace: Abandoned upstream in 2012 (version 2.0)
2022-03-31 security/base: Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
2022-03-31 security/find-zlib: Deprecated, no longer relevant
2022-03-31 security/razorback-clamavNugget: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 security/shimmer: Abandonware, last release in 2008
2022-03-31 security/kripp: Abandonware, upstream returns 404 and last release
was back in 2007
2022-03-31 security/ipfilter2dshield: Abandonware, no word of it on upstream web
site
2022-03-31 security/sha: Obsolete, we have tools in base
(Only the first 15 lines of the commit message are shown above )
security/*: Deprecate and mark ports BROKEN that are dead upstream and/or
abandonware
security/afl - Migrate to security/afl++
security/amap - Abandoned upstream, last release 10+ years ago
security/amavis-stats - Upstream is dead and last release was back in 2005
security/arirang - Abandoned (website also refers to Ruby 1.9) and a 9+ year
old webserver security scanner isn't useful today
security/axTLS - Very outdated and abandoned, current version in tree was
released in 2013 and last by upstream in 2019
security/base - Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
security/bruteforceblocker - Abandonware, please consider using
security/sshguard
security/cfs - Deprecated upstream, reference:
https://www.bayofrum.net/cgi-bin/fossil/cfs/index
security/cisco-torch - Unfetchable, dead upstream
security/cp2fwb - Used with deprecated software Firewall Builder
security/dcetest - Targets deprecated protocol by Microsoft in favour of .NET
security/doscan - Abandonware, last release in 2014. Please consider using
security/masscan or sysutils/pnscan
security/find-zlib - Deprecated, no longer relevant
(Only the first 15 lines of the commit message are shown above )
Style: improve ONLY_FOR_ARCHS_REASON (grammar, markup, etc.)
ONLY_FOR_ARCHS_REASON is used as part of the sentence and thus should
start with lower-case letter and not end with a period which is added
by the framework, similar to other knobs like BROKEN, IGNORE, et al.
While here, remove needless quoting, add missing Oxford comma, expand
contractions and jargonisms, use correct spelling for proper names.
security/afl++: Update to 3.14c
Build two flavors, one compiled with LLVM13 and one with GCC. Mixing
compilers in the same build is too complicated for casual maintainance.
The flavors are installed into their own prefixes in /usr/local/afl++-gcc
and /usr/local/afl++-llvm which also solves the conflict with
security/afl.
Changes: https://github.com/AFLplusplus/AFLplusplus/blob/3.14c/docs/Changelog.md#version-314c-release
security/afl++: Unlock build on aarch64
In theory it might work on other archs but that has not been tested.
While here
- Install missing docs
- Do not install afl-system-config since it is Linux only
- Add CONFLICTS_INSTALL to security/afl (forgotten in r505008)
Update to 2.39b
- Move to LLVM 3.9
- Remove TEST_INSTRUMENTATION option and move instrumentation tests to
the test stage
- Remove MINIMIZE_CORPUS option: afl-cmin was always installed anyway
- Remove useless pkg-message: afl-cplot prompts you to install gnuplot
on its own
Changes: http://lcamtuf.coredump.cx/afl/ChangeLog.txt
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D9820
security/afl: 2.29 -> 2.32
- Adds a new LLVM_VERSION knob to control the LLVM version the port uses
when using the LLVM option
- Switches the default LLVM version from 3.7 to 3.8
PR: 212009
Submitted by: Tobias Kortkamp <t@tobik.me> (maintainer)
security/afl: 1.96.b -> 2.02b
Changes:
- Add new LLVM option which adds afl-clang-fast and afl-clang-fast++.
Enabled by default, but broken on FreeBSD 9.
- The PLOT_SUPPORT option was broken in r405132 because of a typo in
its RUN_DEPENDS. Gnuplot is only required by afl-plot which will
quit with an error alerting the user if it isn't installed, so
instead of fixing the typo we remove it instead. Added a
pkg-message suggesting to install gnuplot if afl-plot is wanted.
PR: 207236
Submitted by: Tobias Kortkamp <t@tobik.me> (maintainer)
security/afl: Update to 1.83b
While at it, reset maintainer to ports@ as the port now
contains LICENSE goo whose meaning remains a mystery.
PR: 201107
Submitted by: Fabian Keil <fk fabiankeil de> (maintainer)
- Update to version 1.05b
- Add OPTIONs for MINIMIZE_CORPUS and PLOT_SUPPORT (latter via gnuplot)
PR: 196095
Submitted by: fk@fabiankeil.de (maintainer)
- Update to version 0.80b [1]
- Fix DOCS option handling, it's default no need to add it to OPTIONS_DEFAULT,
do not optionally install DOCS files, staging takes care of that
PR: 195415 [1]
Submitted by: maintainer [1]
New port: security/afl
American fuzzy lop is a fuzzer that employs a novel type of compile-time
instrumentation and genetic algorithms to automatically discover clean,
interesting test cases that trigger new internal states in the targeted
binary. This substantially improves the functional coverage for the
fuzzed code.
WWW: http://lcamtuf.coredump.cx/afl/
PR: 195279
Submitted by: Fabian Keil <fk@fabiankeil.de>
