-
Notifications
You must be signed in to change notification settings - Fork 53
FuzzingPlugins
Evan Nemerson edited this page Oct 15, 2015
·
8 revisions
I'm trying to make sure all plugins receive at least some attention from a fuzzer before 1.0. What follows in an overview of the current status.
I'm using AFL with ASAN, the goal is to complete at least 1 cycle for each codec.
<tr>
<td>brotli</td>
<td></td>
<td></td>
</tr>
<tr>
<td>bsc</td>
<td></td>
<td></td>
</tr>
<tr>
<td>bzip2</td>
<td>OK</td>
<td>Fuzzed by others</td>
</tr>
<tr>
<td>crush</td>
<td></td>
<td></td>
</tr>
<tr>
<td>csc</td>
<td>Vulnerable</td>
<td>Lots of issues found and reported, awaiting fixes.</td>
</tr>
<tr>
<td>density</td>
<td></td>
<td></td>
</tr>
<tr>
<td>fari</td>
<td></td>
<td></td>
</tr>
<tr>
<td>fastlz</td>
<td></td>
<td></td>
</tr>
<tr>
<td>gipfeli</td>
<td></td>
<td></td>
</tr>
<tr>
<td>heatshrink</td>
<td></td>
<td></td>
</tr>
<tr>
<td>lz4</td>
<td>OK</td>
<td>Fuzzed by others</td>
</tr>
<tr>
<td>lzf</td>
<td></td>
<td></td>
</tr>
<tr>
<td>lzg</td>
<td></td>
<td></td>
</tr>
<tr>
<td>lzham</td>
<td></td>
<td></td>
</tr>
<tr>
<td>lzjb</td>
<td></td>
<td></td>
</tr>
<tr>
<td>lzma</td>
<td></td>
<td></td>
</tr>
<tr>
<td>lzo</td>
<td></td>
<td></td>
</tr>
<tr>
<td>ms-compress</td>
<td></td>
<td></td>
</tr>
<tr>
<td>ncompress</td>
<td></td>
<td></td>
</tr>
<tr>
<td>pithy</td>
<td></td>
<td></td>
</tr>
<tr>
<td>quicklz</td>
<td></td>
<td></td>
</tr>
<tr>
<td>snappy</td>
<td></td>
<td></td>
</tr>
<tr>
<td>wflz</td>
<td></td>
<td></td>
</tr>
<tr>
<td>yalz77</td>
<td></td>
<td></td>
</tr>
<tr>
<td>zlib</td>
<td>OK</td>
<td>Fuzzed by others</td>
</tr>
<tr>
<td>zlib-ng</td>
<td></td>
<td>Should be okay as it's a fork of zlib</td>
</tr>
<tr>
<td>zling</td>
<td></td>
<td></td>
</tr>
<tr>
<td>zpaq</td>
<td></td>
<td>Several issues found, fix released. 2nd run in progress.</td>
</tr>
<tr>
<td>zstd</td>
<td></td>
<td>Several issues found and fixed (currently in dev branch only)</td>
</tr>
Plugin | Status | Notes |
brieflz | Some preliminary fuzzing didn't turn up anything, but I haven't done a full run. | |