Closed Bug 1738278 Opened 3 years ago Closed 2 years ago

Land initial fuzzing snapshot API

Categories

(Core :: Fuzzing, enhancement, P1)

x86_64
Linux
enhancement

Tracking

()

RESOLVED FIXED
96 Branch
Tracking Status
firefox95 --- wontfix
firefox96 --- fixed

People

(Reporter: decoder, Assigned: decoder)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

We can inject Nyx via LD_PRELOAD and then wrap/expose the API in mozilla-central to allow implementing arbitrary fuzzing targets in our code easily.

I have a patch that adds the preliminary API, but due to how dynamic symbol resolving works, we have to drag all API function pointers through the main binary (similar to what we do with the libFuzzer callback).

Pushed by choller@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/785d636b5956
Add fuzzing snapshot API. r=truber,firefox-build-system-reviewers,glandium
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 96 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: