google / google/oss-fuzz

Add the possibility to run binaries instead of libfuzzer harnesses

Open
#8,818 4 comments 1 reaction 0 assignees View on GitHub
Dominant language
Shell
Stars
12.6k
Forks
2.9k
Avg merge
2d 2h
Merged PRs (30d)
62

Description

Some software (like `tar`, `jq`, `vim`, ...) are ~~too cursed~~ not designed as a library and thus can't easily (or even at all) be shoehorned into a libfuzzer harness, yet are not only used a lot but are prime targets of some [popular exploit acquisition programs]( https://zerodium.com/program.html ).

It would be nice to be able to fuzz them :)

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by examining how OSS-Fuzz currently runs libFuzzer harnesses, then compare that with the listed binary targets such as tar, jq, and vim; done means a supported way to fuzz binaries without library harnesses.

Written by the indexing model from the issue text.

Assessment

Domain
security, testing-qa
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.