Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Taint tracking #8

Open
3 tasks
novafacing opened this issue Sep 14, 2023 · 0 comments
Open
3 tasks

Taint tracking #8

novafacing opened this issue Sep 14, 2023 · 0 comments
Labels
enhancement A new feature or enhancement to an existing feature. low-priority Low priority tasks that still need to be completed for an upcoming release. major A major change, bug, or feature requiring significant effort. research Research-level tasks that may take a significant amount of time and effort.

Comments

@novafacing
Copy link
Contributor

Full-propagation taint tracking enables some very powerful mutations during fuzzing. We can easily support taint propagation by grabbing instructions on the fly in hit_count tracing mode.

  • Choose a taint engine (e.g. libdft, or a variation of it)
  • Enable lifting/propagation from traced instructions into the chosen taint engine
  • Implement feedback/mutators for the taint information
@novafacing novafacing added major A major change, bug, or feature requiring significant effort. low-priority Low priority tasks that still need to be completed for an upcoming release. research Research-level tasks that may take a significant amount of time and effort. enhancement A new feature or enhancement to an existing feature. labels Sep 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement A new feature or enhancement to an existing feature. low-priority Low priority tasks that still need to be completed for an upcoming release. major A major change, bug, or feature requiring significant effort. research Research-level tasks that may take a significant amount of time and effort.
Projects
None yet
Development

No branches or pull requests

1 participant