tacasv1: replace LibFuzzer with AFL++ 4.40c (persistent mode + CmpLog) - #66

Closed

GuilhermeBn198 wants to merge 14 commits into

Commits on Sep 26, 2026

docs(tacasv1): design spec — replace LibFuzzer with AFL++
GuilhermeBn198
committed
b72835b
docs(tacasv1): implementation plan — LibFuzzer to AFL++
GuilhermeBn198
committed
e98397d
feat(tacasv1): install AFL++ 4.40c (PCGUARD) in the dev image
GuilhermeBn198
committed
fdd1fb4
feat(tacasv1): resolve afl-clang-fast/afl-fuzz paths
GuilhermeBn198
committed
0031130
feat(tacasv1): replace FindLibFuzzer with FindAFLPlusPlus
GuilhermeBn198
committed
1455be8
feat(tacasv1): AFL++ persistent nondet generator
GuilhermeBn198
committed
208c6dc
feat(tacasv1): drive AFL++ from the Caller
GuilhermeBn198
committed
d9ab6d0
feat(tacasv1): --nondet-generator afl replaces fuzzer
GuilhermeBn198
committed
c18cd77
chore(tacasv1): rename SKIP_LIB_FUZZER→SKIP_AFL_PLUS_PLUS and update docs
GuilhermeBn198
committed
abae549
fix(tacasv1): make the AFL++ arm build and confirm violations

GuilhermeBn198
and
claude
committed
87f9aaa
fix(tacasv1): address the review of the AFL++ fix commit

GuilhermeBn198
and
claude
committed
d089c90
feat(tacasv1): CmpLog companion binary, and rewind the AFL++ read index

GuilhermeBn198
and
claude
committed
1a49aa5
fix(tacasv1): bound afl-fuzz by timeout alone, not also by -V

GuilhermeBn198
and
claude
committed
a6068c6
fix(verdict): an empty vector is a witness when the program reads no input

GuilhermeBn198
and
claude
committed
6c7b0f2