diff options
author | llzmb <46303940+llzmb@users.noreply.github.com> | 2021-11-24 08:11:15 +0100 |
---|---|---|
committer | llzmb <46303940+llzmb@users.noreply.github.com> | 2021-11-24 08:11:15 +0100 |
commit | 22726315c3bd31f53c2f4bcf1f8649767ec5276a (patch) | |
tree | 8bde749e8abeaf862ce089c1c68a456cae310b1e /docs/beyond_crashes.md | |
parent | 8b5eafe7c504e68e710244ae7e58b1809e6584d9 (diff) | |
download | afl++-22726315c3bd31f53c2f4bcf1f8649767ec5276a.tar.gz |
Merge various files into "fuzzing_in_depth.md"
Diffstat (limited to 'docs/beyond_crashes.md')
-rw-r--r-- | docs/beyond_crashes.md | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/docs/beyond_crashes.md b/docs/beyond_crashes.md deleted file mode 100644 index 4836419c..00000000 --- a/docs/beyond_crashes.md +++ /dev/null @@ -1,23 +0,0 @@ -# Going beyond crashes - -Fuzzing is a wonderful and underutilized technique for discovering non-crashing -design and implementation errors, too. Quite a few interesting bugs have been -found by modifying the target programs to call abort() when say: - - - Two bignum libraries produce different outputs when given the same - fuzzer-generated input, - - - An image library produces different outputs when asked to decode the same - input image several times in a row, - - - A serialization / deserialization library fails to produce stable outputs - when iteratively serializing and deserializing fuzzer-supplied data, - - - A compression library produces an output inconsistent with the input file - when asked to compress and then decompress a particular blob. - -Implementing these or similar sanity checks usually takes very little time; -if you are the maintainer of a particular package, you can make this code -conditional with `#ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION` (a flag also -shared with libfuzzer and honggfuzz) or `#ifdef __AFL_COMPILER` (this one is -just for AFL). \ No newline at end of file |