googleprojectzero / domato

DOM fuzzer
https://googleprojectzero.blogspot.ch/2017/09/the-great-dom-fuzz-off-of-2017.html
Apache License 2.0
1.69k stars 278 forks source link

add WebGL Support #22

Closed ghost closed 5 years ago

ghost commented 5 years ago

this commit adds a WebGL dictionary, generator and template...

i signed the cla.

regards

ifratric commented 5 years ago

Hey, thanks! A couple of initial comments:

ghost commented 5 years ago

hi, i did this some time ago, and figured people might want to use this. i'll apply changes to this pr according to your comment.

i'd be surprised if i know more than anyone about gl but i didn't encounter this problem. personally i found a uaf, at the time, but had problems reproducing the crash. take this as an example: https://bugs.chromium.org/p/chromium/issues/detail?id=848914 (this was obviously fuzzed)

anyway.. i'll apply the change's and comment here again.

ghost commented 5 years ago

well.. i hope this makes more sense...

ifratric commented 5 years ago

Looks good to me now, thanks! Also interesting to know the background and about the other bug.

ghost commented 5 years ago

well, what can be done more is to add a syntax for the shaders and fuzz them as well. i can do that once i'll have the time. ty for sharing your useful tools.

regards

ifratric commented 5 years ago

That would be awesome :-)

ghost commented 5 years ago

looks like some have taken this to the next level =)

https://twitter.com/0xmemeda/status/1132071133069447169