Fuzzing the Media Framework in Android

Recommendations

Info

Fuzzing the Stagefright frameworkStagefright command line interfaceroot@android:/ # stagefright -husage: stagefright-h(elp)-a(udio)-n repetitions-l(ist) components-m max-number-of-frames-to-decode in each pass-p(rofiles) dump decoder profiles supported-t(humbnail) extract video thumbnail or album art-s(oftware) prefer software codec-r(hardware) force to use hardware codec-o playback audio-w(rite) filename (write to .mp4 file)-x display a histogram of decoding times/fps (video only)-S allocate buffers from a surface-T allocate buffers from a surface texture-d(ump) filename (raw stream data to a file)-D(ump) filename (decoded PCM data to a file)22
AgendaIntroductionFuzzing Media Content in AndroidData generationFuzzing the Stagefright frameworkLogging & Triage mechanisms23
Page 1 and 2: Fuzzing the Media Framework in Andr
Page 3 and 4: IntroductionFuzzing• Form of blac
Page 5 and 6: IntroductionAudio and video as atta
Page 7 and 8: AgendaIntroductionFuzzing Media Con
Page 9 and 10: Fuzzing Media Content in AndroidSte
Page 13 and 14: Data generationBasic Fuzzing Framew
Page 15 and 16: Data generationFuzzBox• Multi-cod
Page 17 and 18: Data generationRadamsa• General p
Page 21: Fuzzing the Stagefright frameworkOv
Page 25 and 26: Logging and Triage MechanismsInitia
Page 27 and 28: Logging and Triage MechanismsInitia
Page 29 and 30: Logging and Triage MechanismsTestin
Page 31 and 32: Logging and Triage MechanismsTriage
Page 33 and 34: Logging and Triage MechanismsResult
Page 37 and 38: Fuzzing Stagefright with AFLAFL on

Fuzzing the Media Framework in Android

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?