in_app persistent mode not working correctly

[personnumber3377]

Hi!

I have found a method inside a closed source binary and then patched the binary to go into a loop when executing the function of interest. (I added a jmp after the return from the target function such that it jumps back to the call instruction). The fuzzer seems to work correctly, however the persistence doesn't work, since it opens the entire program again on each fuzzing cycle. How to make it such that it actually loops correctly? The program is ORGCHART.EXE in microsoft office and you can read more about that here: https://personnumber3377.github.io/projects/fuzzing_orgchat.html . I am trying to essentially fuzz ORGCHART.EXE and I patched the binary such that it should loop the function of interest, however afl-fuzz opens the binary on each cycle again.