THE FUZZING PROJECT

Recommendations

Info

KASAN ASAN for the Linux Kernel. Userspace and Kernel ASAN independent of each other. Found a bug in my GPU driver just by booting with KASAN. 24
UNDEFINED BEHAVIOR SANITIZER (UBSAN) Finds code that is undefined in C Invalid shifts, int overflows, unaligned memory access, ... Problem: Just too many bugs, problems rare There's also TSAN (Thread sanitizer, race conditions) and MSAN (Memory Sanitizer, uninitialized memory) 25
Page 1 and 2: THE FUZZING PROJECT Can we run C wi
Page 3 and 4: 3
Page 5 and 6: WHAT IS FUZZING? Test software with
Page 7 and 8: AMERICAN FUZZY LOP 7
Page 9 and 10: 9
Page 11 and 12: ADDRESS SANITIZER (ASAN) If you onl
Page 13 and 14: 13
Page 15 and 16: 15
Page 17 and 18: BN_SQR BUG (CVE-2014-3570) Wrong ca
Page 19 and 20: ASAN IN PRODUCTION Yes, but not for
Page 21 and 22: FIXING PACKAGES Memory access bugs
Page 23: IT WORKS Running server with real w
Page 27 and 28: AFL AND ANDROID Implementation from
Page 29 and 30: GET RID OF C Safer programming lang
Page 31: THANKS FOR LISTENING Use Address Sa

THE FUZZING PROJECT

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?