Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add libFuzzer dictionary support #15

Open
attekett opened this issue Jun 22, 2016 · 0 comments
Open

Add libFuzzer dictionary support #15

attekett opened this issue Jun 22, 2016 · 0 comments

Comments

@attekett
Copy link
Member

At the end of each run, libFuzzer prints recommended dictionary it has collected during the run.

Example:(libxml2 stub run.)

54598 DONE cov: 13393 bits: 76413 indir: 375 units: 5746 exec/s: 540

Recommended dictionary.

"id" # Uses: 2307
"foo:" # Uses: 1868

End of recommended dictionary.

Done 54598 runs in 101 second(s)

libFuzzer can use these dictionaries to improve its performance in the following runs.

We should collect these recommended dictionaries from each run and incrementally build larger dictionary that is fed as an input for the next fuzzing round.

We could also write the dictionary out into /results/.dict, so when we start fuzzing next time we could load dictionary built on previous fuzzing campaigns.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant