Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / external / honggfuzz / 12e246245374b2e6045c2a5a564f0ab3381b1d17
commit12e246245374b2e6045c2a5a564f0ab3381b1d17[log] [tgz]
authorAnestis Bechtsoudis <anestis@census-labs.com>Sun Oct 30 15:20:21 2016 +0200
committerAnestis Bechtsoudis <anestis@census-labs.com>Sun Oct 30 15:20:21 2016 +0200
tree330a8531c93eb10cfb46b603bb1ccb4890ce713a
parentd0b2e1d5e57ddb4dd5f2ee243f62d65cbdbb2cfb [diff]
parent797813345669993976ca76f5e6b7956a0585d2ce [diff]
Merge branch 'master' into linux-symbols-bl-wl

* master:
  [Android] Fix force clean sequence bug
  [Android] Android mk should use APP_PLATFORM
tree: 330a8531c93eb10cfb46b603bb1ccb4890ce713a
  1. android/
  2. docs/
  3. examples/
  4. libhfuzz/
  5. linux/
  6. mac/
  7. posix/
  8. third_party/
  9. tools/
  10. .gitignore
  11. .gitmodules
  12. arch.h
  13. CHANGELOG
  14. cmdline.c
  15. cmdline.h
  16. common.h
  17. CONTRIBUTING
  18. COPYING
  19. display.c
  20. display.h
  21. files.c
  22. files.h
  23. fuzz.c
  24. fuzz.h
  25. honggfuzz.c
  26. log.c
  27. log.h
  28. Makefile
  29. mangle.c
  30. mangle.h
  31. README.md
  32. report.c
  33. report.h
  34. sancov.c
  35. sancov.h
  36. subproc.c
  37. subproc.h
  38. util.c
  39. util.h
README.md

honggfuzz

Description

  • A general-purpose, easy-to-use fuzzer with interesting analysis options. See USAGE for details
  • Supports several hardware-based (CPU) and software-based feedback-driven fuzzing methods
  • It works (at least) under GNU/Linux, FreeBSD, Mac OS X, Windows/CygWin and Android
  • Supports persistent modes of fuzzing (long-lived process calling a fuzzed API repeatedly) with libhfuzz
  • Can fuzz standalone long-lasting processes (e.g. network servers like Apache's httpd and ISC's bind)

Code

Requirements

  • Linux - The BFD library (libbfd-dev) and libunwind (libunwind-dev/libunwind8-dev)
  • FreeBSD - gmake
  • Android - Android SDK/NDK. Also see this detailed doc on how to build and run it
  • Windows - CygWin
  • Darwin/OS X - Xcode 10.8+
  • if Clang/LLVM is used - the BlocksRuntime Library (libblocksruntime-dev)

Trophies

The tool has been used to find a few interesting security problems in major software packages; Examples:

Other

This is NOT an official Google product.