AFL-TCis a tool chain that integrates into the environment of Test-Comp.Coverage-guided greybox fuzzers like produce raw binary data that is given to programs as input on stdin, without any knowledge of how this data is interpreted. In contrast to that, Test-Comp requires structured XML descriptions of test cases that list a sequence of individual input values, which are read whenever the program calls an input function. Previous adaptations of fuzzers used tool-specific modifications for Test-Comp. Now, AFL-TCdemonstrates a flexible solution that decouples the test generation from the Test-Comp format: AFL-TCfirst runs (or any other tester that produces binary input for stdin), then replays each input with a test harness that (a) records how the test input is interpreted by the program and (b) outputs the recording as corresponding XML elements. To provide test cases early,AFL-TCemploys a monitor that triggers a transformation whenever new test files are discovered.AFL-TCparticipated in both Test-Comp categories Cover-Error and Cover-Branches. It placed 6th overall, 4th among active participants,and best in the sub-category C.coverage-branches.Arrays.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

AFL-TC: Transforming Fuzzer Test Inputs for Test-Comp (Competition Contribution)

  • Thomas Lemberger,
  • Henrik Wachowitz

摘要

AFL-TCis a tool chain that integrates into the environment of Test-Comp.Coverage-guided greybox fuzzers like produce raw binary data that is given to programs as input on stdin, without any knowledge of how this data is interpreted. In contrast to that, Test-Comp requires structured XML descriptions of test cases that list a sequence of individual input values, which are read whenever the program calls an input function. Previous adaptations of fuzzers used tool-specific modifications for Test-Comp. Now, AFL-TCdemonstrates a flexible solution that decouples the test generation from the Test-Comp format: AFL-TCfirst runs (or any other tester that produces binary input for stdin), then replays each input with a test harness that (a) records how the test input is interpreted by the program and (b) outputs the recording as corresponding XML elements. To provide test cases early,AFL-TCemploys a monitor that triggers a transformation whenever new test files are discovered.AFL-TCparticipated in both Test-Comp categories Cover-Error and Cover-Branches. It placed 6th overall, 4th among active participants,and best in the sub-category C.coverage-branches.Arrays.