Remove Examples Remove Exercises Remove Libraries Remove Presentation
article thumbnail

How Mayhem Helped Uncover a Security Vulnerability in RustOS (CVE-2022-36086)

ForAllSecure

The target of interest for this example comes from Philipp Opperman's amazing " BlogOS ". This library is designed for use in embedded and bootloader contexts, where we don't have the standard library's Vec or Box for dynamic memory. We can't just call Heap::deallocate , for example, with a randomly generated pointer!

article thumbnail

Beginning Fuzz Cycle Automation: Improving Testing And Fuzz Development With Coverage Analysis

ForAllSecure

This time we’ll take a look at how to write better tests in the form of harness programs (also known as fuzz drivers, programs written to exercise specific parts of the code) that we will use for fuzz testing. If we want to improve our confidence, we can add steps to exercise more of the code. Watch EP 02 See TV Guide.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Beginning Fuzz Cycle Automation: Improving Testing And Fuzz Development With Coverage Analysis

ForAllSecure

This time we’ll take a look at how to write better tests in the form of harness programs (also known as fuzz drivers, programs written to exercise specific parts of the code) that we will use for fuzz testing. If we want to improve our confidence, we can add steps to exercise more of the code. Return to TinyXML2.

article thumbnail

BEGINNING FUZZ CYCLE AUTOMATION: IMPROVING TESTING AND FUZZ DEVELOPMENT WITH COVERAGE ANALYSIS

ForAllSecure

This time we’ll take a look at how to write better tests in the form of harness programs (also known as fuzz drivers, programs written to exercise specific parts of the code) that we will use for fuzz testing. If we want to improve our confidence, we can add steps to exercise more of the code. Return to TinyXML2.

article thumbnail

Firmware Fuzzing 101

ForAllSecure

Fuzzing firmware presents a specific set of challenges that are not often present together in other targets. This requires an increased level of expertise and know-how to deal with efficiently: Dependency on specific hardware features present on the physical device. Non-glibc C standard library. Is a MIPS Linux firmware.

article thumbnail

Firmware Fuzzing 101

ForAllSecure

Fuzzing firmware presents a specific set of challenges that are not often present together in other targets. This requires an increased level of expertise and know-how to deal with efficiently: Dependency on specific hardware features present on the physical device. Non-glibc C standard library. Is a MIPS Linux firmware.

article thumbnail

Web archiving partners meet in Cambridge

Archive-It

Approximately 40 participants congregated at the Massachusetts Institute of Technology’s Hayden Library in Cambridge for a program of technology and community program updates, followed by in-depth conversation and feedback about the topics that will shape Archive-It software development in the year to come.