trailofbits / testing-handbook

Trail of Bits Testing Handbook
https://appsec.guide/
Creative Commons Attribution 4.0 International
36 stars 4 forks source link

Section on structured fuzzing #41

Open maxammann opened 2 months ago

maxammann commented 2 months ago

TLV encodings can represent a challenge to fuzzers. The idea is to choose a more structured fuzzing approach by using custom mutators that don't destroy expected boundaries/file formats like https://chromium.googlesource.com/chromium/src/+/main/testing/libfuzzer/libprotobuf-mutator.md

A lightweight workaround for this issue is FuzzedDataProvider

Motivation arises from test-fuzz partially which fuzzes TLV encoded data: https://github.com/trailofbits/test-fuzz/issues/304