blob: 963bed1cdd224763d1cb5f2b7e5c3861713d0454 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
Notes on experimental afl driven ui fuzzing
only keyboard events for now
vcl/workben/eventtesting.writer is just serialized "hello" + ctrl+a + ctrl+b
keystrokes to get things started
vcl/workben/eventtesting.impress is a bit more involved and inserts text,
a new slide via the menu, bullets and undos for all of that
currently an arbitrary limit of 50 keystrokes before application quits in
order to initially explore that shallow space
writer:
Xnest :1
cp vcl/workben/eventtesting.writer eventtesting
afl-fuzz -f eventtesting -t 10000 -i ~/fuzz/in.vcl -o ~/fuzz/out.vcl -d -T vcl -m 50000000 instdir/program/soffice.bin --nologo --writer --eventtesting --norestore --display :1
impress:
Xnest :1
cp vcl/workben/eventtesting.impress eventtesting
afl-fuzz -f eventtesting -t 10000 -i ~/fuzz/in.vcl -o ~/fuzz/out.vcl -d -T vcl -m 50000000 instdir/program/soffice.bin --nologo --impress --eventtesting --norestore --display :1
This also works with --headless and no --display entry and thus no Xnest required
|
