GraphFuzz: Library API Fuzzing with Lifetime-aware Dataflow Graphs

Abstract

We present the design and implementation of GraphFuzz, a new structure-, coverage- and object lifetime-aware fuzzer capable of automatically testing low-level Library APIs. Unlike other fuzzers, GraphFuzz models sequences of executed functions as a dataflow graph, thus enabling it to perform graph-based mutations both at the data and at the execution trace level. GraphFuzz comes with an automated specification generator to minimize the developer integration effort.

BibTeX

@inproceedings{Green-Avgerinos:ICSE22,
  author    = {Harrison Green and
               Thanassis Avgerinos},
  title     = {{GraphFuzz:} Library {API} Fuzzing with Lifetime-aware Dataflow Graphs},
  booktitle = {ICSE},
  pages     = {1070--1081},
  publisher = {{ACM}},
  year      = {2022},
}

GraphFuzz: Library API Fuzzing with Lifetime-aware Dataflow Graphs

Abstract

Related papers