search

SoftSec-KAIST / NTFuzz

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
MIT License
94 stars 22 forks source link

mutate function #1

Open scuzyx opened 2 years ago

scuzyx commented 2 years ago

hey guys,i have a question that how do you use mutation functions to mutate.i just see the function definition but i just dont see where you use it.i have search the function name in the whole directory.Please help me.Thanks a lot.

jchoi2022 commented 2 years ago

Hi,

First, MutateArg() function in Mutate.cpp file is responsible for mutating a single system call argument. This function is called by the hooker function for each system call, and such hooker functions are automatically generated by our DLLAnalysis module. For the detailed usage of this module, please refer to the Step 1 and Step 2 of our README. When you open GeneralHooker_*.cpp file generated by the DLLAnalysis module, you will find hooker functions that internally call MutateArg().