package watchdog import ( "flag" "fmt" "github.com/maride/afl-transmit/logistic" "github.com/maride/afl-transmit/net" "io/ioutil" "log" "os" "time" ) var ( rescan int isMainNode bool ) // RegisterWatchdogFlags registers required flags for the watchdog func RegisterWatchdogFlags() { flag.IntVar(&rescan, "rescan", 30, "Minutes to wait before rescanning local fuzzer directories") flag.BoolVar(&isMainNode, "main", false, "Set this option if this afl-transmit instance is running on the node running the main afl-fuzz instance") } // Watch over the specified directory, send updates to peers and re-scan after the specified amount of seconds func WatchFuzzers(outputDirectory string) { // Loop forever for { // Pack important parts of the fuzzers into an archive packedFuzzers, packerErr := logistic.PackFuzzers(getTargetFuzzer(outputDirectory), outputDirectory) if packerErr != nil { log.Printf("Failed to pack fuzzer: %s", packerErr) continue } // and send it to our peers go net.SendToPeers(packedFuzzers) // Sleep a bit time.Sleep(time.Duration(rescan) * time.Minute) } } // Searches in the specified output directory for fuzzers which we want to pack. // Identifying the main fuzzer is done by searching for the file "is_main_node" // This relies on the "election process" done by secondary fuzzers if they don't find a local main node. // If that is detected, a secondary fuzzer becomes the main node in terms of syncing. That means we need to focus on // the main node even if there is no real main node running locally. // However it is important to avoid transmitting the is_main_node file - else, the secondaries will think that there is // a main node running locally. Skipping the is_main_node file means the other fuzzers (and especially the elected main // fuzzer) detect the transmitted fuzzer as a normal (and dead) secondary. ... blabla // // (see AFLplusplus/src/afl-fuzz.run.c:542) func getTargetFuzzer(outputDirectory string) []string { // find main fuzzer directory - its the only one required by the secondaries // List files (read: fuzzers) in output directory filesInDir, readErr := ioutil.ReadDir(outputDirectory) if readErr != nil { log.Printf("Failed to list directory content of %s: %s", outputDirectory, readErr) return nil } for _, f := range filesInDir { // Get stat for maybe-existent file mainnodePath := fmt.Sprintf("%s%c%s%cis_main_node", outputDirectory, os.PathSeparator, f.Name(), os.PathSeparator) _, statErr := os.Stat(mainnodePath) if os.IsNotExist(statErr) { // File does not exist. Not the ~~chosen one~~ main fuzzer. Next. continue } else if statErr != nil { // An error occurred. File is maybe in a Schrödinger state. log.Printf("Unable to stat file %s: %s", mainnodePath, statErr) continue } // is_main_node file exists, so we found the correct fuzzer directory - return it fullPath := fmt.Sprintf("%s%c%s", outputDirectory, os.PathSeparator, f.Name()) return []string{ fullPath, } } // Failed to find the main node - probably we are in --main mode by accident log.Printf("Unable to find main node in %s - sure afl-transmit should run in --main mode?", outputDirectory) return nil }