Fuzzing the Media Framework in Android

Recommendations

Info

Fuzzing Stagefright with AFLThe American Fuzzy Lop fuzzing tool• Instrumentation based fuzzing tool• Targeted binaries need to be compiled with afl-gcc (wrapperover gcc)• Two fuzzing modes: dumb-mode, instrumented-mode• Instrumented mode detects changes to program control flowto find new code paths• Detects both crashes and hangs and sorts out the uniqueissues36
Fuzzing Stagefright with AFLAFL on Android• Build instrumented binary like a regular Android module• Use environment variables (afl-gcc built as wrapper overgcc toolchain from Android)37
Page 1 and 2: Fuzzing the Media Framework in Andr
Page 3 and 4: IntroductionFuzzing• Form of blac
Page 5 and 6: IntroductionAudio and video as atta
Page 7 and 8: AgendaIntroductionFuzzing Media Con
Page 9 and 10: Fuzzing Media Content in AndroidSte
Page 13 and 14: Data generationBasic Fuzzing Framew
Page 15 and 16: Data generationFuzzBox• Multi-cod
Page 17 and 18: Data generationRadamsa• General p
Page 21 and 22: Fuzzing the Stagefright frameworkOv
Page 25 and 26: Logging and Triage MechanismsInitia
Page 27 and 28: Logging and Triage MechanismsInitia
Page 29 and 30: Logging and Triage MechanismsTestin
Page 31 and 32: Logging and Triage MechanismsTriage
Page 33 and 34: Logging and Triage MechanismsResult
Page 35: AgendaIntroductionFuzzing Media Con

Fuzzing the Media Framework in Android

Create successful ePaper yourself

Delete template?

Save as template?