1919833 - Remove AFL_INIT call in fuzzing interface

Status: RESOLVED FIXED

(Core :: Fuzzing, defect, P1)

Description

[Christian Holler (:decoder)]

We currently have an AFL_INIT() call in the AFL part of the fuzzing interface here:

https://searchfox.org/mozilla-central/source/tools/fuzzing/interface/FuzzingInterface.cpp#36

That likely got added in the latest AFL++ refactorings, but it's actually harmful: At that point, we can already have threads running (e.g. when running via JSRT) and this call basically tells AFL++ to defer fork server initialization until that point in time. The result is a fork with threads running, causing random hangs.

Comment 1

[Christian Holler (:decoder)]

Attachment: Bug 1919833 - Remove AFL_INIT call from fuzzing interface. r?truber

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/988e8b78a2c4
Remove AFL_INIT call from fuzzing interface. r=truber

Comment 3

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/988e8b78a2c4