-
Notifications
You must be signed in to change notification settings - Fork 635
Introduce unix socket mode for AFL #52
base: master
Are you sure you want to change the base?
Conversation
The current implementation of AFL is using stdin and files as the input for the application. Introduce new unix socket mode for AFL: afl-fuzz ... -u <sock_name> ... In this mode fuzzer will connect to the sock_name unix socket and all the testcases will be send thought this socket. The socket can be the fuzzed application itself or just a proxy which will redirect input to the fuzzed application. Signed-off-by: Dima Stepanov <[email protected]>
Add unix mode description to the README file. Describe why it can be useful and what is the main use case. Signed-off-by: Dima Stepanov <[email protected]>
Thanks for your pull request. It looks like this may be your first contribution to a Google open source project (if not, look below for help). Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). 📝 Please visit https://cla.developers.google.com/ to sign. Once you've signed (or fixed any issues), please reply here with What to do if you already signed the CLAIndividual signers
Corporate signers
ℹ️ Googlers: Go here for more info. |
1 similar comment
Thanks for your pull request. It looks like this may be your first contribution to a Google open source project (if not, look below for help). Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). 📝 Please visit https://cla.developers.google.com/ to sign. Once you've signed (or fixed any issues), please reply here with What to do if you already signed the CLAIndividual signers
Corporate signers
ℹ️ Googlers: Go here for more info. |
@googlebot I signed it! |
We found a Contributor License Agreement for you (the sender of this pull request), but were unable to find agreements for all the commit author(s) or Co-authors. If you authored these, maybe you used a different email address in the git commits than was used to sign the CLA (login here to double check)? If these were authored by someone else, then they will need to sign a CLA as well, and confirm that they're okay with these being contributed to Google. ℹ️ Googlers: Go here for more info. |
1 similar comment
We found a Contributor License Agreement for you (the sender of this pull request), but were unable to find agreements for all the commit author(s) or Co-authors. If you authored these, maybe you used a different email address in the git commits than was used to sign the CLA (login here to double check)? If these were authored by someone else, then they will need to sign a CLA as well, and confirm that they're okay with these being contributed to Google. ℹ️ Googlers: Go here for more info. |
Add new unix socket mode for AFL to send input not only using stdin or shared file, but using the unix socket communication. The main idea was to use it to fuzz low-level cases like emulated devices or some kind of the network servers. In this case AFL will be independent of the transport level.
We used this approach to fuzz virtio block device implementation for both QEMU and SPDK. Also we presented it on the KVM Forum 2019 event.
Maybe this mode can be helpful for somebody else ).