Bug Hunter Diary

Figure 8-1: Playing the unmodifiedAlarm.m4a with MobileSafariFigure 8-2: Playing the modified test-casefile (file0.m4a)So what had I achieved so far? I was able to prepare audio-filetest cases via mutation, launch MobileSafari, and instruct it to loadthe test cases. At this point, I wanted to find a way to automaticallyopen the test-case files in MobileSafari one by one while monitoringmediaserverd for faults. I created this small Bash script to do the job onthe phone:01 #!/bin/bash0203 fuzzhost=192.168.99.1030405 echo [+] =================================06 echo [+] Start fuzzing07 echo [+]08 echo -n "[+] Cleanup: "09 killall MobileSafari10 killall mediaserverd11 sleep 512 echo1314 origpid=`ps -u mobile -o pid,command | grep /usr/sbin/mediaserverd | cut -c 0-5`15 echo [+] Original PID of /usr/sbin/mediaserverd: $origpid1617 currpid=$origpid18 let cnt=019 let i=02021 while [ $cnt -le 1000 ];138 Chapter 8