3 ms·
Why wasn't it found with afl-fuzz?
by d33 9y ago
Why wasn't it found with afl-fuzz?
- landave 9y agoThe RAR PPMd bug can only be triggered if many conditions are satisfied. For example, the RAR archive needs to be mostly correctly structured, and needs to have at least two items that are compressed with the right flags (e.g., RAR version 3, PPMd). Furthermore, the compressed streams need to be constructed such that the bugs are triggered. Hence, I believe the bug is difficult to hit with straightforward coverage-guided fuzzing.
- blattimwind 9y agoBecause AFL does not find every path-execution-based vulnerability?