crashme, fuzz, etc.. are good tools! [LWN.net]

crashme, fuzz, etc.. are good tools!

Posted Oct 21, 2004 4:48 UTC (Thu) by dank (guest, #1865)
In reply to: Pretty sad that an approach this simple can kill so many apps by lakeland
Parent article: How to kill a web browser

You're thinking of 'fuzz', I think:
http://www.cs.wisc.edu/~bart/fuzz/

Another, older, test was 'crashme', which did similar
things for kernels (and found an exploitable bug
in sparc's math instructions early on). There
were probably other implementations, but one is at:
http://people.delphiforums.com/gjc/crashme.html

These are both examples of software fault injection
systems. I think
http://citeseer.ist.psu.edu/sieh02umlinux.html
has a list of others...

(Log in to post comments)

crashme, fuzz, etc.. are good tools!

Posted Oct 21, 2004 9:18 UTC (Thu) by hildeb (subscriber, #6532) [Link]

I took this even further in my diploma thesis.
http://www.infosun.fmi.uni-passau.de/st/papers/issta2000/

crashme, fuzz, etc.. are good tools!

Posted Oct 21, 2004 10:09 UTC (Thu) by nix (subscriber, #2304) [Link]

I must say, the automated cause-effect chain analysis stuff linked from there looks quite thoroughly fascinating.