3 ms·
I bet his mutation strategy works in tandem with the SIMD strategy. Probably the input for each SIMD lane differs by only one byte or something so that they are
by trishume 8y ago
I bet his mutation strategy works in tandem with the SIMD strategy. Probably the input for each SIMD lane differs by only one byte or something so that they are maximally coherent.
- gamozolabs 8y agoBingo
- TickleSteve 8y agoSo what you're really doing is (in parallel) finding the decoherence points... These branching/decision points are much more easily found by instrumenting the code as in AFL. No need to parallelise at all, the compiler gives you that information. What you have seems like a neat trick, but not an efficient way of actually fuzzing.
- dragontamer 8y ago> compiler gives you that information It seems like he's fuzzing machine code. So he doesn't have the original source code.