when i run droif-ff,something wrong with it，how can i fix it? (0) Generate Files (1) Start running fuzzer (2) View Crashes (3) Triage Crashes (4) View Source of Crashes (5) Exploitability Test Please enter your selection : 1 Your Option is : (1) Start running fuzzer

*** Executing adb shell logcat -c command Traceback (most recent call last): File "droid-ff.py", line 52, in show_options() File "droid-ff.py", line 35, in show_options run_campaign.start() File "/root/droid-ff/run_campaign.py", line 12, in start clear_logcat() File "/root/droid-ff/run_campaign.py", line 16, in clear_logcat adb_android.shell("logcat -c") File "build/bdist.linux-x86_64/egg/adb_android/adb_android.py", line 46, in shell File "build/bdist.linux-x86_64/egg/adb_android/adb_android.py", line 142, in _exec_command File "/usr/lib/python2.7/subprocess.py", line 566, in check_output process = Popen(stdout=PIPE, _popenargs, *_kwargs) File "/usr/lib/python2.7/subprocess.py", line 710, in init errread, errwrite) File "/usr/lib/python2.7/subprocess.py", line 1335, in _execute_child raise child_exception OSError: [Errno 2] No such file or directory

Dear antojoseph,

I'm trying to use your DroidFF tool but it does not work on my computer.

Problem occurred after I select number of Samples to be Generated. You can see below images for more detail: With Bit flipper selection: https://drive.google.com/file/d/0B7uHDzWwW2yLaVBFa2RDeG5lQTY2dHlHWHA3cnJpSThIUXVv/view?usp=sharing With Radamsa: https://drive.google.com/file/d/0B7uHDzWwW2yLUnQwVnRPOXZUMEJzMUx6aWZPRjV3cGh0U3NN/view?usp=sharing With Peach: https://drive.google.com/file/d/0B7uHDzWwW2yLUlBva25xVkFkUG15MG8yQk1jdUlLY1ZYOVRZ/view?usp=sharing Please help me to figure out what problem is.

Look forward to your reply soon ^ ^ Thank you so much!

For the pyZUFF installation line I get this error: Could not find a version that satisfies the requirement pyZZUF (from versions: ) No matching distribution found for pyZZUF

when i finish fuzz,there has 10 tombstones about /system/xbin/dexdump for signal 11. dexdump has something wrong? --------- beginning of crash 06-07 09:22:22.100 25787 25787 F libc : Fatal signal 11 (SIGSEGV), code 1, fault addr 0xf6dc0000 in tid 25787 (dexdump) 06-07 09:22:22.203 518 518 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** 06-07 09:22:22.203 518 518 F DEBUG : Build fingerprint: 'unknown' 06-07 09:22:22.203 518 518 F DEBUG : Revision: '0' 06-07 09:22:22.203 518 518 F DEBUG : ABI: 'arm' 06-07 09:22:22.203 518 518 F DEBUG : pid: 25787, tid: 25787, name: dexdump >>> /system/xbin/dexdump <<< 06-07 09:22:22.204 518 518 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xf6dc0000 --------- beginning of system 06-07 09:22:22.204 977 1312 W NativeCrashListener: Couldn't find ProcessRecord for pid 25787 06-07 09:22:22.206 518 518 F DEBUG : r0 00004578 r1 f6dbff6c r2 ffef7ae4 r3 00004578 06-07 09:22:22.206 518 518 E DEBUG : AM write failed: Broken pipe 06-07 09:22:22.206 518 518 F DEBUG : r4 00045780 r5 f6dc001c r6 0027b8fe r7 f6dc152c 06-07 09:22:22.206 518 518 F DEBUG : r8 80078071 r9 000015af sl 00000000 fp 00000000 06-07 09:22:22.206 518 518 F DEBUG : ip 00000000 sp ff9ec9bc lr 00000000 pc f7020008 cpsr 20070010 06-07 09:22:22.214 518 518 F DEBUG : 06-07 09:22:22.214 518 518 F DEBUG : backtrace: 06-07 09:22:22.214 518 518 F DEBUG : #00 pc 00002008 /system/lib/libz.so (adler32+488) 06-07 09:22:22.215 518 518 F DEBUG : #01 pc 00007001 /system/xbin/dexdump 06-07 09:22:22.215 518 518 F DEBUG : #02 pc 00004081 /system/xbin/dexdump 06-07 09:22:22.215 518 518 F DEBUG : #03 pc 00003cf9 /system/xbin/dexdump 06-07 09:22:22.215 518 518 F DEBUG : #04 pc 00001ce3 /system/xbin/dexdump 06-07 09:22:22.215 518 518 F DEBUG : #05 pc 0001705d /system/lib/libc.so (__libc_init+44) 06-07 09:22:22.215 518 518 F DEBUG : #06 pc 00001dac /system/xbin/dexdump 06-07 09:22:22.217 529 2766 E DMD : [M/listen_server] dsm_selinux has error (20901) reported 06-07 09:22:22.217 529 2766 E DMD : [M/listen_server] action-0, cname-dsm_selinux, info-0 06-07 09:22:22.217 529 2766 E DMD : [M/dsm_dump_error] dsm_selinux finish dump 226 bytes

When running setup on osx, I got:

mkdir: /Users/XXXXX/myfuzzer/fuzzer: No such file or directory
mkdir: /Users/XXXXX/myfuzzer/fuzzer: No such file or directory
mkdir: /Users/XXXXX/myfuzzer/fuzzer: No such file or directory

Here on line number 7, we are calling radamsa in a loop, which isn't required.

radamsa provides an -n option on its own, which would remove the overhead of calling it lets say 100k times. Submitting a pull request for the same.

I have

• fixed some issues with identations
• added an option within droid-ff.py to remove the generated files
• fixed issue of result evaluation (triage.py line 19)
• updated README
• cleaned code up