1*08b48e0bSAndroid Build Coastguard Worker /*
2*08b48e0bSAndroid Build Coastguard Worker american fuzzy lop++ - LD_PRELOAD for fuzzing argv in binaries
3*08b48e0bSAndroid Build Coastguard Worker ------------------------------------------------------------
4*08b48e0bSAndroid Build Coastguard Worker
5*08b48e0bSAndroid Build Coastguard Worker Copyright 2019-2024 Kjell Braden <[email protected]>
6*08b48e0bSAndroid Build Coastguard Worker
7*08b48e0bSAndroid Build Coastguard Worker Licensed under the Apache License, Version 2.0 (the "License");
8*08b48e0bSAndroid Build Coastguard Worker you may not use this file except in compliance with the License.
9*08b48e0bSAndroid Build Coastguard Worker You may obtain a copy of the License at:
10*08b48e0bSAndroid Build Coastguard Worker
11*08b48e0bSAndroid Build Coastguard Worker http://www.apache.org/licenses/LICENSE-2.0
12*08b48e0bSAndroid Build Coastguard Worker
13*08b48e0bSAndroid Build Coastguard Worker */
14*08b48e0bSAndroid Build Coastguard Worker
15*08b48e0bSAndroid Build Coastguard Worker #define _GNU_SOURCE /* for RTLD_NEXT */
16*08b48e0bSAndroid Build Coastguard Worker #include <dlfcn.h>
17*08b48e0bSAndroid Build Coastguard Worker #include <stdlib.h>
18*08b48e0bSAndroid Build Coastguard Worker #include <stdio.h>
19*08b48e0bSAndroid Build Coastguard Worker #include <unistd.h>
20*08b48e0bSAndroid Build Coastguard Worker #include "argv-fuzz-inl.h"
21*08b48e0bSAndroid Build Coastguard Worker
__libc_start_main(int (* main)(int,char **,char **),int argc,char ** argv,void (* init)(void),void (* fini)(void),void (* rtld_fini)(void),void * stack_end)22*08b48e0bSAndroid Build Coastguard Worker int __libc_start_main(int (*main)(int, char **, char **), int argc, char **argv,
23*08b48e0bSAndroid Build Coastguard Worker void (*init)(void), void (*fini)(void),
24*08b48e0bSAndroid Build Coastguard Worker void (*rtld_fini)(void), void *stack_end) {
25*08b48e0bSAndroid Build Coastguard Worker
26*08b48e0bSAndroid Build Coastguard Worker int (*orig)(int (*main)(int, char **, char **), int argc, char **argv,
27*08b48e0bSAndroid Build Coastguard Worker void (*init)(void), void (*fini)(void), void (*rtld_fini)(void),
28*08b48e0bSAndroid Build Coastguard Worker void *stack_end);
29*08b48e0bSAndroid Build Coastguard Worker int sub_argc;
30*08b48e0bSAndroid Build Coastguard Worker char **sub_argv;
31*08b48e0bSAndroid Build Coastguard Worker
32*08b48e0bSAndroid Build Coastguard Worker (void)argc;
33*08b48e0bSAndroid Build Coastguard Worker (void)argv;
34*08b48e0bSAndroid Build Coastguard Worker
35*08b48e0bSAndroid Build Coastguard Worker orig = dlsym(RTLD_NEXT, __func__);
36*08b48e0bSAndroid Build Coastguard Worker
37*08b48e0bSAndroid Build Coastguard Worker if (!orig) {
38*08b48e0bSAndroid Build Coastguard Worker
39*08b48e0bSAndroid Build Coastguard Worker fprintf(stderr, "hook did not find original %s: %s\n", __func__, dlerror());
40*08b48e0bSAndroid Build Coastguard Worker exit(EXIT_FAILURE);
41*08b48e0bSAndroid Build Coastguard Worker
42*08b48e0bSAndroid Build Coastguard Worker }
43*08b48e0bSAndroid Build Coastguard Worker
44*08b48e0bSAndroid Build Coastguard Worker sub_argv = afl_init_argv(&sub_argc);
45*08b48e0bSAndroid Build Coastguard Worker
46*08b48e0bSAndroid Build Coastguard Worker return orig(main, sub_argc, sub_argv, init, fini, rtld_fini, stack_end);
47*08b48e0bSAndroid Build Coastguard Worker
48*08b48e0bSAndroid Build Coastguard Worker }
49*08b48e0bSAndroid Build Coastguard Worker
50