mirror of https://github.com/reactos/syzkaller.git synced 2024-11-24 03:49:45 +00:00

syzkaller is an unsupervised coverage-guided kernel fuzzer

Go to file

Anton Lindqvist 985f75cc50 sys/openbsd: remove mincore(2) description It was recently removed from OpenBSD[1]. [1] https://marc.info/?l=openbsd-cvs&m=154723400730318&w=2		2019-01-22 09:21:03 +01:00
dashboard	pkg/report: support CONFIG_PRINTK_CALLER	2019-01-03 19:23:07 +01:00
docs	Update found_bugs.md	2019-01-17 17:20:55 +01:00
executor	sys/openbsd: remove mincore(2) description	2019-01-22 09:21:03 +01:00
Godeps	vendor: add github.com/ianlancetaylor/demangle	2018-06-28 09:59:11 +02:00
pkg	pkg/host: enable FeatureComparisons on OpenBSD	2019-01-21 11:23:19 +01:00
prog	Update hints_test.go	2019-01-07 10:01:28 +01:00
sys	sys/openbsd: remove mincore(2) description	2019-01-22 09:21:03 +01:00
syz-ci	syz-ci: run syzkaller tests without sandbox	2018-12-18 10:48:38 +01:00
syz-fuzzer	all: detect extra coverage support	2019-01-16 19:19:53 +01:00
syz-hub	syz-manager: factor out rpc serving part	2018-12-26 10:58:23 +01:00
syz-manager	syz-manager: provide config name in Stats	2019-01-18 13:20:33 +01:00
tools	tools/syz-trace2syz/proggen: add support to generate structs like sockaddr_storage_in6	2019-01-17 13:44:43 +01:00
vendor	vendor: add github.com/ianlancetaylor/demangle	2018-06-28 09:59:11 +02:00
vm	vm/qemu: Disable VGA on ppc64le	2019-01-15 16:45:20 +01:00
.clang-format	buildbot: add .travis.yml	2017-07-28 13:25:48 +02:00
.gitignore	sys: check in generated files	2017-06-13 15:55:31 +02:00
.gometalinter.json	tools/syz-trace2syz: add tool to convert strace output to programs	2018-12-06 16:25:37 +01:00
.travis.yml	travis: switch to ubuntu 16.04	2019-01-19 13:35:25 +01:00
AUTHORS	docs/netbsd.md: updated documentation for NetBSD	2019-01-14 09:51:10 +01:00
CONTRIBUTORS	docs/netbsd.md: updated documentation for NetBSD	2019-01-14 09:51:10 +01:00
LICENSE	initial commit	2015-10-12 10:16:57 +02:00
Makefile	Makefile: enable -Wunused-const-variable	2019-01-19 19:20:39 +01:00
README.md	Makefile: collect coverage report for codecov.io	2018-12-31 12:51:07 +01:00

README.md

syzkaller - kernel fuzzer

syzkaller is an unsupervised coverage-guided kernel fuzzer. Linux kernel fuzzing has the most support, akaros, freebsd, fuchsia, netbsd, windows and gvisor are supported to varying degrees.

The project mailing list is syzkaller@googlegroups.com. You can subscribe to it with a google account or by sending an email to syzkaller+subscribe@googlegroups.com.

List of found bugs.

Documentation

Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Most of the documentation at this moment is related to the Linux kernel. For other OS kernels check: Akaros, Darwin/XNU, FreeBSD, Fuchsia, NetBSD, OpenBSD, Windows, gVisor.

External Articles

Research work based on syzkaller
From HardenedLinux project:
- Kernel QA with syzkaller and qemu (tutorial on how to setup syzkaller with qemu)
- Syzkaller crash DEMO (tutorial on how to extend syzkaller with new syscalls)
- Kernel debug tool with syzkaller (debugging qemu VM created by syz-manager with gdb)
- Explanation of some syzkaller internals
- A example of fuzzing the ceph filesystem
Coverage-guided kernel fuzzing with syzkaller (by David Drysdale)
ubsan, kasan, syzkaller und co (video) (by Florian Westphal)
Debugging a kernel crash found by syzkaller (by Quentin Casasnovas)
Linux Plumbers 2016 talk slides
syzkaller: the next gen kernel fuzzer (basics of operations, tutorial on how to run syzkaller and how to extend it to fuzz new drivers)
syzbot and the tale of thousand kernel bugs [video]

Disclaimer

This is not an official Google product.