3 ms·
They are. There's a project by google called syzcaller, which pretty much does that (it's a bit more intelligent than that, and also includes running sanitizers
by hannob 4y ago
They are. There's a project by google called syzcaller, which pretty much does that (it's a bit more intelligent than that, and also includes running sanitizers, which find otherwise hard to detect memory safety and concurrency issues).
It's actually causing an unexpected problem: It finds so many issues that kernel devs have troule keeping up fixing them.
- galangalalgol 4y agoExcellent! I keep complaining after each vuln pops up here that there isn't anyone with a kernel pipeline. Hopefully they have some static analysis too? Does the data out of this effort support the ggp that most of these defects are concurrency related vs the norm of memory safety?
- vincnetas 4y agoSo it turns out kernel does have unit tests, just that they are running after release.
- haspok 4y agoNo, this is way above the unit test level. Fuzzers usually are.