afl-cmin.awk(8)

💖 NAME 💖

bestie, this is afl-cmin.awk — that’s literally the whole name. You’re reading the afl-cmin.awk(8) page from the System Manager's Manual, and it’s giving iconic Unix energy already ✨💅

---

🌸 SYNOPSIS 🌸

afl-cmin

yep, that’s the whole synopsis — short, sweet, and lowkey mysterious, no cap 🎀

---

✨ OPTIONS ✨

afl-cmin [ options ] -- /path/to/target_app [ ... ]

🎯 Required parameters:

• -i dir — input directory with starting corpus. this is where your starting corpus lives, bestie 💖
• -o dir — output directory for minimized files. the minimized files go here, periodt ✨

⚙️ Execution control settings:

• -T tasks — how many parallel tasks to run (default: 1, all=nproc) 🔥
• -f file — location read by the fuzzed program (default: stdin) 🎀
• -m megs — memory limit for child process ( MB) 💀
• -t msec — run time limit for child process (default: 5000) ⏱️
• -O — use binary-only instrumentation (FRIDA mode) 🦋
• -Q — use binary-only instrumentation (QEMU mode) 🧚
• -U — use unicorn-based instrumentation (unicorn mode) 🌈
• -X — use Nyx mode 👑

🎀 Minimization settings:

• -A — allow crashes and timeouts (not recommended) 🙈
• -C — keep crashing inputs, reject everything else 💅
• -e — solve for edge coverage only, ignore hit counts ⭐

For additional tips, please consult README.md 🫶

🌈 Environment variables used:

• AFL_CRASH_EXITCODE — optional child exit code to be interpreted as crash 💥
• AFL_FORKSRV_INIT_TMOUT — time the fuzzer waits for the forkserver to come up ⏳
• AFL_KEEP_TRACES — leave the temporary <out_dir>/.traces directory 🧚
• AFL_KILL_SIGNAL — Signal delivered to child processes on timeout (default: SIGKILL) 💀
• AFL_FORK_SERVER_KILL_SIGNAL — Signal delivered to fork server processes on termination (default: SIGTERM). If this is not set and AFL_KILL_SIGNAL is set, this will be set to the same value as AFL_KILL_SIGNAL. 🔥
• AFL_NO_FORKSRV — run target via execve instead of using the forkserver 🌀
• AFL_CMIN_ALLOW_ANY — write tuples for crashing inputs also 💖
• AFL_PATH — path for the afl-showmap binary if not found anywhere in PATH 🛣️
• AFL_PRINT_FILENAMES — If set, the filename currently processed will be printed to stdout 🖨️
• AFL_SKIP_BIN_CHECK — skip afl instrumentation checks for target binary 🚫

---

👑 AUTHOR 👑

AFL++ was written by Michal "lcamtuf" Zalewski and is maintained by Marc "van Hauser" Heuse <mh@mh-sec.de>, Dominik Maier <domenukk@gmail.com>, Andrea Fioraldi <andreafioraldi@gmail.com> and Heiko "hexcoder-" Eissfeldt <heiko.eissfeldt@hexco.de>. The homepage of AFL++ is: https://github.com/AFLplusplus/AFLplusplus 👑💜

---

📜 LICENSE 📜

AFL++ is licensed under AGPL-3.0-or-later, with original components under Apache-2.0; an optional commercial license is available. See https://github.com/AFLplusplus/AFLplusplus/blob/stable/LICENSING.md 📜✨

---

okay bye bestie — source/version shoutout: AFL++; date: 2026-06-05; manual: afl-cmin.awk(8). mwah 💋🫶