How can i use with multiple ip tracing

[5angjun]

Hello

I am really lover of kAFL

however, I want trace multiple device driver with ip0 ip1 ip2 ip3...

How can I set this multiple IP Filtering value?

I need some friendly documentation about this.

thanks

[Wenzel]

Hi @5angjun ,

thanks for reporting this issue.

The best way to set these IP filters is by using the kAFL_HYPERCALL_RANGE_SUBMIT to inform the host of the low-high ranges of your drivers.

This is achieved here in the Windows driver fuzzing example:
https://github.com/IntelLabs/kafl.targets/blob/master/windows_x86_64/src/driver/vuln_test.c#L189

buffer[0] = (UINT64)drivers[i]; // low range
buffer[1] = (UINT64)drivers[i] + ModuleInfo->Modules[i].ImageSize; // high range
buffer[2] = 0; // IP0

I agreed that this isn't documented enough, i'll open an issue to track this problem.