Add the possibility to run binaries instead of libfuzzer harnesses
Open
- Dominant language
- Shell
- Stars
- 12.6k
- Forks
- 2.9k
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 62
Description
Some software (like `tar`, `jq`, `vim`, ...) are ~~too cursed~~ not designed as a library and thus can't easily (or even at all) be shoehorned into a libfuzzer harness, yet are not only used a lot but are prime targets of some [popular exploit acquisition programs]( https://zerodium.com/program.html ).
It would be nice to be able to fuzz them :)
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by examining how OSS-Fuzz currently runs libFuzzer harnesses, then compare that with the listed binary targets such as tar, jq, and vim; done means a supported way to fuzz binaries without library harnesses.
Written by the indexing model from the issue text.
Assessment
- Domain
- security, testing-qa
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100