search

ekiwi / rfuzz

rfuzz: coverage-directed fuzzing for RTL research platform
https://people.eecs.berkeley.edu/~laeufer/papers/rfuzz_kevin_laeufer_iccad2018.pdf
BSD 3-Clause "New" or "Revised" License
97 stars 12 forks source link

Need help with Rfuzz inputs #5

Closed Rahul-Kande closed 3 years ago

Rahul-Kande commented 3 years ago

Hi,

I want to compare the output of rocket-chip when fuzzed with Rfuzz with SPIKE, the ISA simulator. For this, I will have to run the spike with the same inputs as the ones used on rocket-chip. In the repository where can I find the elf or binary files used as input to drive the rocket-chip? Are they output in a format that SPIKE can accept directly or does the input generated by Rfuzz have to be modified to use with SPIKE?

Any help regarding this task would be really helpful.

Thanking you in advance.

ekiwi commented 3 years ago

If you are interested in fuzzing RISC-V processors in particular and to compare their execution to a software model, I would advise you to look into Difuzz. It is really cool work that makes the fuzzing idea much more practical for the purpose of processor testing. The paper shows how they found a bunch of bugs in open source RISC-V processors and their implementation might help you with the fuzzing setup you are asking about.

I hope this helps!