stephenfewer / grinder

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
BSD 3-Clause "New" or "Revised" License
415 stars 131 forks source link

Reproduce a crash with nduja fuzzer #11

Closed geeksec80 closed 10 years ago

geeksec80 commented 11 years ago

Hi, I read "Re-producing a crash" issued by kernelGadaffi, and I encounter the same problem when I fuzzed IE using nduja fuzzer.
"It is also important to get logging working correctly in situations such as event callbacks, which need to execute the generated javascript in the callback itself " was refered from your comment, I also think that the fuzzer is getting logging working uncorrectly about event callbacks, would you please give me some sample about fuzzer logging event callbacks correctly? Thanks a lot!

mutfuzz commented 10 years ago

the idea is that when a javascript code is being executed inside and event handler, you should put it in an event handler when you are trying to reproduce that crash, note that nduja fuzzer dose not do that for you.

wchen-r7 commented 10 years ago

nduja is buggy and yes, logging is a big issue. Writing your own from scratch will make your life easier. In fact, I recommend rejecting any issues related to nduja.

stephenfewer commented 10 years ago

I agree with @wchen-r7, nduja doesn't perform logging correctly so please contact the author if you want help with it. Closing this ticket.