Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1313002

Bug#1150752: aflplusplus: afl-cc mistakenly treats -fcf-protection as CFISAN request

From Viktor Pashaiev <w.paszajew@gmail.com>
Newsgroups linux.debian.bugs.dist
Subject Bug#1150752: aflplusplus: afl-cc mistakenly treats -fcf-protection as CFISAN request
Date 2026-10-13 11:20 +0200
Message-ID <NNGPU-5eTQ-5@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Package: aflplusplus
Version: 5.02c-0.5
Severity: normal
Tags: patch upstream
User: ubuntu-devel@lists.ubuntu.com
Usertags: origin-ubuntu stonking

Dear Maintainer,

In src/afl-cc.c, the compiler flag -fcf-protection is parsed as:

  } else if (!strncmp(cur_argv, "-fcf-protection", strlen("-fcf-protection"))) {
    SCAN_KEEP(aflcc->have_cfisan, 1);

This incorrectly records -fcf-protection as a CFISAN request, which injects -flto in clang mode and disables PCGUARD instrumentation. As a result, compiling targets with -fcf-protection (and self-tests on systems where -fcf-protection is enabled by default) breaks.

Upstream already addressed this in commit a9e8587ee86c8ff20a14de6aea6ec07d7d3f699f:
https://github.com/AFLplusplus/AFLplusplus/commit/a9e8587ee86c8ff20a14de6aea6ec07d7d3f699f

The backported patch is attached.

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread


Thread

Bug#1150752: aflplusplus: afl-cc mistakenly treats -fcf-protection as CFISAN request Viktor Pashaiev <w.paszajew@gmail.com> - 2026-10-13 11:20 +0200

csiph-web