v0.11.0
- Feature: Add sanitizer for context lookups
- Feature: Add sanitizer for OS command injection
- Feature: Add sanitizer for regex injection
- Feature: Add sanitizer for LDAP injections
- Feature: Add sanitizer for arbitrary class loading
- Feature: Guide fuzzer to generate proper map lookups keys
- Feature: Generate standalone Java reproducers for autofuzz
- Feature: Hooks targeting interfaces and abstract classes hook all implementations
- Feature: Enable multiple BEFORE and AFTER hooks for the same target
- Feature: Greatly improve performance of coverage instrumentation
- Feature: Improve performance of interactions between Jazzer and libFuzzer
- Feature: Export JaCoCo coverage dump using
--coverage_dumpflag - Feature: Honor
JAVA_OPTS - API: Add
exploreStateto help the fuzzer maximize state coverage - API: Provide
additionalClassesToHookfield inMethodHookannotation to hook dependent classes - Fix: Synchronize coverage ID generation
- Fix: Support REPLACE hooks for constructors
- Fix: Do not apply REPLACE hooks in Java 6 class files
This release also includes smaller improvements and bugfixes.