Fuzzing binaries with LLVM's libFuzzer and rev.ng

[edi33416]

trafficstars

Hello,

I'm trying to reproduce the steps presented in the Fuzzing binaries with LLVM's libFuzzer and rev.ng blog post, but I wasn't able to find the LLVM passes mentioned in the blog post.

Are the passes mentioned in the post available on GitHub? How would one go about to reproduce the steps described in the blog post?

Looking forward to your answer, Eduard

[aleclearmind]

Hi Eduard, we're looking into making some of that available. We want to push out the part enabling to use libFuzzer on lifted binaries soon. But the part where you can call directly functions with a nice prototype has been postponed after we finalize #27 and #37.

Will post an update once the PR for using libFuzzer is ready.

[edi33416]

Cheers,

Any updates on this? Thank you for your previous response and I'm looking forward to your reply

[aleclearmind]

Sadly #37 has fallen out of our short terms goals, as fuzzing in general. You can fuzz things after function isolation though, you can try to run revng translate -i, link in the fuzzing function in support.c and call root and add the instrumentation passes.

[edi33416]

Thank you for the updates and for the guidelines. I'll look into it

[aleclearmind]

Fuzzing is no longer one of our core goals. Closing this.