使用afl来fuzz libtiff

export CC=afl-clang-fast
export CXX=afl-clang-fast++
./configure --disable-shared
make

wget https://lcamtuf.coredump.cx/afl/demo/afl_testcases.tgz

afl-cmin -i testcase_full -o testcase_cmin ./tools/tiff2pdf @@ /dev/null

corpus minimization tool for afl-fuzz by <lcamtuf@google.com>

[*] Testing the target binary...
[+] OK, 101 tuples recorded.
[*] Obtaining traces for input files in 'testcase_full'...
    Processing file 6399/6399...
[*] Sorting trace sets (this may take a while)...
[+] Found 12057 unique tuples across 6399 files.
[*] Finding best candidates for each tuple...
    Processing file 6399/6399...
[*] Sorting candidate list (be patient)...
[*] Processing candidates and writing output files...
    Processing tuple 12057/12057...
[+] Narrowed down to 817 files, saved in 'testcase_cmin'.

afl-fuzz -i testcase_cmin/ -o afl_output/ tools/tiff2pdf @@ /dev/null