commit	1377fd1af6cbbe978f15de3c0db1f4cf76bd25a2	[log] [tgz]
author	Ryan Zoeller <rtzoeller@gmail.com>	Wed Aug 26 15:36:04 2015 -0500
committer	Ryan Zoeller <rtzoeller@gmail.com>	Wed Aug 26 15:36:04 2015 -0500
tree	edeac77b1125a9056149563cd6a633e34dfd512f
parent	3a78aca51be5e02b2b30f9296a9f9bf81ef7fc4c [diff]

tree: edeac77b1125a9056149563cd6a633e34dfd512f

README.md

honggfuzz

Description

A general-purpose, easy-to-use fuzzer with interesting analysis options. See README wiki page for more details
Supports hardware-based feedback-driven fuzzing (requires Linux and a supported CPU model), also for closed-source binaries
It works, at least, under GNU/Linux and FreeBSD (possibly under Mac OS X as well)
Can fuzz long-lasting processes (e.g. network servers like Apache's httpd and ISC's bind)
It's been used to find a few interesting security problems in major software; examples:
- FreeType 2 project: CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519, CVE-2010-2520, CVE-2010-2527
- Multiple bugs in the libtiff library
- Multiple bugs in the librsvg library
- Multiple bugs in the poppler library
- Multiple exploitable bugs in IDA-Pro
- ... and some more

Code

Requirements

(under Linux) - BFD library (libbfd-dev) and LibUnwind (libunwind-dev/libunwind8-dev)
(under FreeBSD) - gmake

Other

This is NOT an official Google product.