Initial import unicornafl

qemu/target/ppc/translate.c

@@ -7625,6 +7625,21 @@ static void ppc_tr_translate_insn(DisasContextBase *dcbase, CPUState *cs)
     LOG_DISAS("nip=" TARGET_FMT_lx " super=%d ir=%d\n",
               ctx->base.pc_next, ctx->mem_idx, (int)msr_ir);
 
+    if (uc->mode & UC_MODE_AFL) {
+        // UNICORN-AFL supports (and needs) multiple exits.
+        uint64_t *exits = uc->exits;
+        size_t exit_count = uc->exit_count;
+        if (exit_count) {
+            size_t i;
+            for (i = 0; i < exit_count; i++) {
+                if (ctx->base.pc_next == exits[i]) {
+                    gen_wait(ctx);
+                    return;
+                }
+            }
+        }
+    }
+
     // Unicorn: end address tells us to stop emulation
     if (ctx->base.pc_next == uc->addr_end) {
         gen_wait(ctx);