Skip to content

v0.11.0

Choose a tag to compare

@bertschneider bertschneider released this 28 Apr 16:29
· 1028 commits to main since this release
  • Feature: Add sanitizer for context lookups
  • Feature: Add sanitizer for OS command injection
  • Feature: Add sanitizer for regex injection
  • Feature: Add sanitizer for LDAP injections
  • Feature: Add sanitizer for arbitrary class loading
  • Feature: Guide fuzzer to generate proper map lookups keys
  • Feature: Generate standalone Java reproducers for autofuzz
  • Feature: Hooks targeting interfaces and abstract classes hook all implementations
  • Feature: Enable multiple BEFORE and AFTER hooks for the same target
  • Feature: Greatly improve performance of coverage instrumentation
  • Feature: Improve performance of interactions between Jazzer and libFuzzer
  • Feature: Export JaCoCo coverage dump using --coverage_dump flag
  • Feature: Honor JAVA_OPTS
  • API: Add exploreState to help the fuzzer maximize state coverage
  • API: Provide additionalClassesToHook field in MethodHook annotation to hook dependent classes
  • Fix: Synchronize coverage ID generation
  • Fix: Support REPLACE hooks for constructors
  • Fix: Do not apply REPLACE hooks in Java 6 class files

This release also includes smaller improvements and bugfixes.