Proj CDeepFuzz Paper Reading: RULF: Rust Library Fuzzing via API Dependency Graph Traversal
Abstract
本文: RULF
Github: https://github.com/Artisan-Lab/RULF
Task: Library harness generation for Rust Library via API dependency graph traversal
特点: special design for 4 objectives: validity and effectiveness of fuzz targets, high API coverage, efficiency
Method: Seach on the API dependency graph
Step:
- breadth-first search with pruning with
- backward search longer sequence for uncovered APIs
- optimize the sequence set
实验:
对象:clap, url, regex, tui, time, xi-core-lib, semver
Competitor: AFL++
test cases数目:generates 7 to 118 fuzz targets for each library
Time: 24 hr each
效果:
- API coverage up to 0.92
- +30 bugs