diff options
author | van Hauser <vh@thc.org> | 2021-11-30 10:56:02 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-11-30 10:56:02 +0100 |
commit | edbf41f78619162071987a44b46ab7f739bb85c1 (patch) | |
tree | 3be630bc3a5d1ea65f3bb49863b37ff5b9d688c4 /docs/beyond_crashes.md | |
parent | 235bb3235e45a81eb2b524f3a76346d91a163e3d (diff) | |
parent | 8968bee836ecde0fa2427b84b2f3ac85c276958f (diff) | |
download | afl++-edbf41f78619162071987a44b46ab7f739bb85c1.tar.gz |
Merge pull request #1172 from llzmb/docs_cleanup_folder_2
Clean up docs folder
Diffstat (limited to 'docs/beyond_crashes.md')
-rw-r--r-- | docs/beyond_crashes.md | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/docs/beyond_crashes.md b/docs/beyond_crashes.md deleted file mode 100644 index 4836419c..00000000 --- a/docs/beyond_crashes.md +++ /dev/null @@ -1,23 +0,0 @@ -# Going beyond crashes - -Fuzzing is a wonderful and underutilized technique for discovering non-crashing -design and implementation errors, too. Quite a few interesting bugs have been -found by modifying the target programs to call abort() when say: - - - Two bignum libraries produce different outputs when given the same - fuzzer-generated input, - - - An image library produces different outputs when asked to decode the same - input image several times in a row, - - - A serialization / deserialization library fails to produce stable outputs - when iteratively serializing and deserializing fuzzer-supplied data, - - - A compression library produces an output inconsistent with the input file - when asked to compress and then decompress a particular blob. - -Implementing these or similar sanity checks usually takes very little time; -if you are the maintainer of a particular package, you can make this code -conditional with `#ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION` (a flag also -shared with libfuzzer and honggfuzz) or `#ifdef __AFL_COMPILER` (this one is -just for AFL). \ No newline at end of file |