mirror of https://github.com/reactos/syzkaller.git synced 2024-11-28 13:50:52 +00:00

syzkaller is an unsupervised coverage-guided kernel fuzzer

Go to file

Anton Lindqvist 3f17ab418a executor: add missing cover_size_ptr field		2018-07-23 11:11:32 +02:00
dashboard	dashboard/config: add fs.mount-max = 100 sysctl	2018-07-18 11:14:00 +02:00
docs	pkg/compiler: support negative integers	2018-07-09 20:47:07 +02:00
executor	executor: add missing cover_size_ptr field	2018-07-23 11:11:32 +02:00
Godeps	vendor: add github.com/ianlancetaylor/demangle	2018-06-28 09:59:11 +02:00
pkg	pkg/vcs: poll fixing commits on akaros and fuchsia	2018-07-20 20:26:59 +02:00
prog	prog: sanitize calls after hints mutation	2018-07-12 12:40:30 +02:00
sys	sys/linux/socket_netlink_route: add specific policies for IFLA_LINKINFO	2018-07-17 10:08:31 +02:00
syz-ci	syz-ci: fix poll of fixing commits	2018-07-20 20:48:34 +02:00
syz-fuzzer	pkg/host: add "network devices" feature	2018-07-13 12:46:32 +02:00
syz-hub	syz-manager: make rpc communication finer grained	2018-06-26 13:59:47 +02:00
syz-manager	syz-manager: Support kernelSrc and vmlinux from different tree	2018-07-23 09:52:04 +02:00
tools	pkg/report: improve akaros reporter and implement symbolization	2018-07-16 17:03:14 +02:00
vendor	vendor: add github.com/ianlancetaylor/demangle	2018-06-28 09:59:11 +02:00
vm	vm: fix "no output" detection	2018-07-08 22:52:24 +02:00
.clang-format	buildbot: add .travis.yml	2017-07-28 13:25:48 +02:00
.gitignore	sys: check in generated files	2017-06-13 15:55:31 +02:00
.gometalinter.json	pkg/build: move from pkg/kernel	2018-06-22 16:40:45 +02:00
.travis.yml	.travis.yml: update libc++ download location	2018-07-02 16:08:32 +02:00
AUTHORS	sys/linux: add rtc description	2018-07-02 17:55:41 +02:00
CONTRIBUTORS	syz-manager: Support kernelSrc and vmlinux from different tree	2018-07-23 09:52:04 +02:00
LICENSE	initial commit	2015-10-12 10:16:57 +02:00
Makefile	Makefile: add akaros support	2018-07-05 13:04:37 +02:00
README.md	docs: add gvisor page	2018-06-25 11:58:28 +02:00

README.md

syzkaller - kernel fuzzer

syzkaller is an unsupervised coverage-guided kernel fuzzer. Linux kernel fuzzing has the most support, akaros, freebsd, fuchsia, netbsd, windows and gvisor are supported to varying degrees.

The project mailing list is syzkaller@googlegroups.com. You can subscribe to it with a google account or by sending an email to syzkaller+subscribe@googlegroups.com.

List of found bugs.

Documentation

Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Most of the documentation at this moment is related to the Linux kernel. For other OS kernels check: Akaros, FreeBSD, Fuchsia, NetBSD, Windows, gVisor.

External Articles

From HardenedLinux project:
- Kernel QA with syzkaller and qemu (tutorial on how to setup syzkaller with qemu)
- Syzkaller crash DEMO (tutorial on how to extend syzkaller with new syscalls)
- Kernel debug tool with syzkaller (debugging qemu VM created by syz-manager with gdb)
- Explanation of some syzkaller internals
- A example of fuzzing the ceph filesystem
Coverage-guided kernel fuzzing with syzkaller (by David Drysdale)
ubsan, kasan, syzkaller und co (video) (by Florian Westphal)
Debugging a kernel crash found by syzkaller (by Quentin Casasnovas)
Linux Plumbers 2016 talk slides
syzkaller: the next gen kernel fuzzer (basics of operations, tutorial on how to run syzkaller and how to extend it to fuzz new drivers)

Disclaimer

This is not an official Google product.