fuzzing anybody

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

google is offereing "Fuzz testing" for famous OSS projects
  https://github.com/google/oss-fuzz

I've thought this might be a nice idea for util-linux and already 
registered
  https://github.com/google/oss-fuzz/pull/120

Stupidly I've missed the point that I would also need to write some code 
which intelligently feeds our UL programs with the generated random 
data to find bugs. I thought that this is what google would do for us 
but they only give us the their infrastructure for running the actual 
tests. ;)

So if anybody is interested in this fuzzing topic ... maybe someone has 
a good idea, say how to feed libsmartcol or libblkid with random data.

A good and even interesting point to start is this "libFuzzer Tutorial":
https://github.com/google/fuzzer-test-suite/blob/master/tutorial/libFuzzerTutorial.md

Also interesting to see how other projects are doing it already in 
google's oss-fuzz.

for example curl: 
https://github.com/google/oss-fuzz/blob/master/projects/curl/curl_fuzzer.cc

or openssl which has a fuzz/ sub-directory in their original project.
https://github.com/openssl/openssl/tree/master/fuzz

cu,
Rudi
--
To unsubscribe from this list: send the line "unsubscribe util-linux" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux