Proj CDeepFuzz Paper Reading: RULF: Rust Library Fuzzing via API Dependency Graph Traversal

Abstract

本文: RULF
Github: https://github.com/Artisan-Lab/RULF
Task: Library harness generation for Rust Library via API dependency graph traversal
特点: special design for 4 objectives: validity and effectiveness of fuzz targets, high API coverage, efficiency
Method: Seach on the API dependency graph
Step:

  1. breadth-first search with pruning with
  2. backward search longer sequence for uncovered APIs
  3. optimize the sequence set

实验:
对象:clap, url, regex, tui, time, xi-core-lib, semver
Competitor: AFL++
test cases数目:generates 7 to 118 fuzz targets for each library
Time: 24 hr each
效果:

  1. API coverage up to 0.92
  2. +30 bugs
posted @ 2023-08-29 15:46  雪溯  阅读(11)  评论(0编辑  收藏  举报