[tor-bugs] #24154 [Applications/Tor Browser]: Look into fuzzing our tor-browser patches

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Dec 20 10:50:32 UTC 2017


#24154: Look into fuzzing our tor-browser patches
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  TorBrowserTeam201711,                |  Actual Points:
  GeorgKoppen201711                              |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor4
-------------------------------------------------+-------------------------

Comment (by toralf):

 I do fuzz tests the Tor git tree using the AFL. I got for enarly every
 fuzz test warnings like these :
 {{{
 torproject at mr-fox ~/done $ grep -h WARNING */fuzz.log | sort -u
 [!] WARNING: No new instrumentation output, test case may be useless.
 [!] WARNING: Some test cases are huge (277 kB) - see
 /usr/share/doc/afl-2.52b/perf_tips.txt!
 [!] WARNING: Some test cases are huge (316 kB) - see
 /usr/share/doc/afl-2.52b/perf_tips.txt!
 [!] WARNING: Some test cases are huge (79.9 kB) - see
 /usr/share/doc/afl-2.52b/perf_tips.txt!
 [!] WARNING: Some test cases look useless. Consider using a smaller set.
 [!] WARNING: You probably have far too many input files! Consider trimming
 down.
 [!] WARNING: Not binding to a CPU core (AFL_NO_AFFINITY set).
 }}}
 Maybe the fuzz_corpora directory needs an update ?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24154#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list