HTFuzz: Heap Operation Sequence Sensitive Fuzzing

Yuanping Yu, Xiangkun Jia, Yuwei Liu, Yanhao Wang, Qian Sang, Chao Zhang, Purui Su

Abstract

Heap-based temporal vulnerabilities (i.e., use-after-free, double-free and null pointer dereference) are highly sensitive to heap operation (e.g., memory allocation, deallocation and access) sequences. To efficiently find such vulnerabilities, traditional code coverage-guided fuzzing solutions could be promoted by integrating heap operation sequence feedback. But current sequence sensitive solutions have limitations in practice.

BibTeX

@inproceedings{Yu-al:ASE22,
  author    = {Yuanping Yu and
               Xiangkun Jia and
               Yuwei Liu and
               Yanhao Wang and
               Qian Sang and
               Chao Zhang and
               Purui Su},
  title     = {{HTFuzz:} Heap Operation Sequence Sensitive Fuzzing},
  booktitle = {ASE},
  pages     = {53:1--53:13},
  publisher = {{ACM}},
  year      = {2022},
}

HTFuzz: Heap Operation Sequence Sensitive Fuzzing

Abstract

Related papers