6 ms·
Really cool! I recently happened to have a similar idea when I came across the rust-fuzz crate, which abstracts over afl, honggfuzz etc. If you're interested,
by lachenmayer 8y ago
Really cool! I recently happened to have a similar idea when I came across the rust-fuzz crate, which abstracts over afl, honggfuzz etc.
If you're interested, my notes are here: https://github.com/lachenmayer/insta-fuzz https://github.com/lachenmayer/insta-fuzz
I ended up "cheating" a little bit by providing a valid JPEG header - I found that rust-fuzz seemed to take far too long to generate any valid JPEG at all by starting from eg. an empty file. But maybe I just wasn't patient enough, after all I was only running it on my laptop :)
- stordoff 8y agoThe author does note in the comments: > Note that by default, afl-fuzz runs on a single core, so it may take several days to get results
- yjftsjthsd-h 8y agoThat's a little annoying, but it looks like it's not too terrible to fix: https://github.com/mirrorer/afl/blob/master/docs/parallel_fuzzing.txt https://github.com/mirrorer/afl/blob/master/docs/parallel_fu...
- Cthulhu_ 8y agoWould a BMP be easier to generate? I'm sure you'd get 99.99% static though.
- lachenmayer 8y agoYeah definitely, a BMP doesn't really have any "interesting" structure though because it's more or less just an array of pixels. The visual artifacts in JPEG files come from all the downsampling / blocks / cosine transform stuff which is really what I wanted to explore.