Re: fuzzing dtc with AFL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Sun, Jan 03, 2016 at 02:32:47AM +1100, Anton Blanchard wrote:
> Hi David,
> 
> I wanted something to test AFL with, and since dtc is simple, self

What's AFL?

> contained and checked out on my laptop, I attacked it. It found a
> number of interesting testcases:
> 
> A divide by zero issue:
> 
> # ./dtc test1.dts 
> Floating point exception
> 
> An issue parsing octals:
> 
> # ./dtc test2.dts 
> dtc: dtc-lexer.l:156: yylex: Assertion `!(*e) || !e[strspn(e, "UL")]'
> failed.
> Aborted
> 
> An issue with null escape characters:
> 
> # ./dtc test3.dts 
> dtc: util.c:155: get_escape_char: Assertion `c' failed.
> Aborted
> 
> and a SEGV:
> 
> # ./dtc test4.dts 
> Segmentation fault

Nice catches all.  I'll try to debug these in detail soon.

-- 
David Gibson			| I'll have my music baroque, and my code
david AT gibson.dropbear.id.au	| minimalist, thank you.  NOT _the_ _other_
				| _way_ _around_!
http://www.ozlabs.org/~dgibson

Attachment: signature.asc
Description: PGP signature


[Index of Archives]     [Device Tree]     [Device Tree Spec]     [Linux Driver Backports]     [Video for Linux]     [Linux USB Devel]     [Linux Audio Users]     [Linux Kernel]     [Linux SCSI]     [Yosemite Backpacking]

  Powered by Linux