[WIP] continue extension

Author: remiparrot

TODO.md

@@ -12,7 +12,7 @@
 
 # Remove the state machine building process
 * Disable option `-E` disable the state machine building and selection of state to fuzz
-    - [ ] follow the boolean variable `state_aware_mode`
+    - [x] follow the boolean variable `state_aware_mode`
 * In `int main(int argc, char** argv)`:
     - [/] ~remove `check_aslr()` call~
 * In `int setup_ipsm()`:
@@ -23,25 +23,23 @@
     - [ ] remove records of new paths
 * In `EXP_ST u8 common_fuzz_stuff(char** argv, u8* out_buf, u32 len)`:
     - [ ] remove the AFLNet update of `kl_messages` linked list
-    - [ ] remove `update_fuzzs()` call
+    - [x] remove `update_fuzzs()` call
 
 # Build a very simple state list from the seeds files
 * In `static void perform_dry_run(char** argv)`:
-    - [ ] build message from *replay* format (see StateAFL)
+    - [x] build message from *replay* format (see StateAFL)
 * In `void update_state_aware_variables(struct queue_entry *q, u8 dry_run)`
-    - [ ] build a simple state list only if it is a *dry run*
-    - [ ] otherwise do nothing
-* The hash map `khms_states` should be this list
-    - [ ] initialize it in `update_state_aware_variables` in *dry run* mode
-    - [ ] never update it after the initialisation
+    - [x] replace by `void create_new_state(struct queue_entry *q)` only called on *dry run*
+* The hash map `khms_states` should be the list containing the initial states (only)
+    - [x] initialize it in `create_new_state` in *dry run* mode
+    - [x] never update it after the initialisation
 * The type `region_t` should not contain state related stuff (in file `aflnet.h`)
 
 # Select the messages to mutate directly from the seeds files
-* In `struct queue_entry *choose_seed(u32 target_state_id, u8 mode)`
-    - [ ] build a `queue_entry` from the seed file corresponding to the state given as argument
 * In `static u8 fuzz_one(char** argv)` after the flag `AFLNET_REGIONS_SELECTION`
-    - [ ] retrieve the M2 part of the messages from the file `length-seed.state[X]` instead of the region information
-
+    - [x] retrieve the M2 part of the messages from the file `seed-stateXX.length` instead of the region information
+* In `static void read_testcases(void)`
+    - [x] retrieve the M2 part of the messages from the file `seed-stateXX.length`
 
 # Select the states in a round-robin fashion (or any other "fair" selection)
 * In the function `choose_target_state`