Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Taint tracking #8

Open
3 tasks
novafacing opened this issue Sep 14, 2023 · 0 comments
Open
3 tasks

Taint tracking #8

novafacing opened this issue Sep 14, 2023 · 0 comments
Labels
enhancement A new feature or enhancement to an existing feature. low-priority Low priority tasks that still need to be completed for an upcoming release. major A major change, bug, or feature requiring significant effort. research Research-level tasks that may take a significant amount of time and effort.

Comments

@novafacing
Copy link
Contributor

Full-propagation taint tracking enables some very powerful mutations during fuzzing. We can easily support taint propagation by grabbing instructions on the fly in hit_count tracing mode.

  • Choose a taint engine (e.g. libdft, or a variation of it)
  • Enable lifting/propagation from traced instructions into the chosen taint engine
  • Implement feedback/mutators for the taint information
@novafacing novafacing added major A major change, bug, or feature requiring significant effort. low-priority Low priority tasks that still need to be completed for an upcoming release. research Research-level tasks that may take a significant amount of time and effort. enhancement A new feature or enhancement to an existing feature. labels Sep 14, 2023
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
enhancement A new feature or enhancement to an existing feature. low-priority Low priority tasks that still need to be completed for an upcoming release. major A major change, bug, or feature requiring significant effort. research Research-level tasks that may take a significant amount of time and effort.
Projects
None yet
Development

No branches or pull requests

1 participant