fuzzbench

fuzzbench copied to clipboard

Compare ddisasm with other fuzzers.

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Closing this since as far as i can tell this is a duplicate of https://github.com/google/fuzzbench/pull/1679 Please reply to my questions there.

Is there a paper or writeup somewhere discussing ddisasm?

Ddisasm allows binary-only fuzzing by enabling static rewriting of binaries. It was originally described here https://www.usenix.org/conference/usenixsecurity20/presentation/flores-montoya

It's application to binary-only fuzzing has not been described in a publication, but the StochFuzz paper did a comparison against Ddisasm back in 2021. However, there have been many improvements since then.

We are planning to write about the approach and cite the results of this experiment in that writeup.

Is there a paper or writeup somewhere discussing ddisasm?

Ddisasm allows binary-only fuzzing by enabling static rewriting of binaries. It was originally described here https://www.usenix.org/conference/usenixsecurity20/presentation/flores-montoya

It's application to binary-only fuzzing has not been described in a publication, but the StochFuzz paper did a comparison against Ddisasm back in 2021. However, there have been many improvements since then.

We are planning to write about the approach and cite the results of this experiment in that writeup.

Sorry for the delay. Gonna try to merge this today.