mirror of https://github.com/reactos/syzkaller.git synced 2024-12-11 05:13:52 +00:00

syzkaller is an unsupervised coverage-guided kernel fuzzer

Go to file

Dmitry Vyukov c35a341c32 sys/linux: add /dev/dsp descriptions		2019-12-01 11:08:13 +01:00
dashboard	dashboard/config: enable CIFS and OCFS2_FS	2019-11-29 15:02:42 +01:00
docs	docs:update syscall_descriptions.md	2019-11-22 09:42:11 +01:00
executor	sys/linux: add /dev/dsp descriptions	2019-12-01 11:08:13 +01:00
Godeps	vendor/github.com/google/go-cmp: update to HEAD	2019-03-17 18:06:44 +01:00
pkg	pkg/report: improve report titles	2019-11-29 13:13:04 +01:00
prog	prog: extend panic messages	2019-11-26 14:29:58 +01:00
sys	sys/linux: add /dev/dsp descriptions	2019-12-01 11:08:13 +01:00
syz-ci	syz-ci: allow enabling bisect cause and fix jobs separately	2019-11-27 16:40:04 +01:00
syz-fuzzer	pkg/host: add Features.Supported	2019-11-16 09:58:54 +01:00
syz-hub	syz-hub: cap total number of programs sent to a manager	2019-11-29 10:46:26 +01:00
syz-manager	pkg/host: add Features.Supported	2019-11-16 09:58:54 +01:00
tools	tools/fuchsia: remove custom Go toolchain scripts	2019-11-19 17:20:14 -08:00
vendor	vendor/github.com/google/go-cmp: update to HEAD	2019-03-17 18:06:44 +01:00
vm	sys/targets: add HostFuzzer flag	2019-11-16 09:58:54 +01:00
.clang-format
.gitattributes	.gitattributes: hide generated files	2019-11-29 11:27:09 +01:00
.gitignore	fuzzit.sh: migrate syzkaller to new org and introduce regression	2019-08-09 11:56:42 +02:00
.golangci.yml	tools/syz-trace2syz: disable golangci-lint	2019-10-08 12:31:54 +02:00
.travis.yml	fix fuzzit script to work with latest CLI syntax	2019-09-13 15:37:40 +01:00
AUTHORS	tools/create-image.sh: add a new option seek	2019-10-15 12:40:28 +02:00
CODE_OF_CONDUCT.md	Create CODE_OF_CONDUCT.md	2019-02-04 12:05:04 +01:00
CONTRIBUTORS	pkg/report: generalize general protection fault pattern	2019-11-19 08:07:30 +01:00
fuzzbuzz.yaml	fuzz.yaml: rename to fuzzbuzz.yaml	2019-07-19 10:45:19 +02:00
fuzzit.sh	fix fuzzit script to work with latest CLI syntax	2019-09-13 15:37:40 +01:00
LICENSE
Makefile	tools/fuchsia: remove custom Go toolchain scripts	2019-11-19 17:20:14 -08:00
README.md	fuzzit.sh: migrate syzkaller to new org and introduce regression	2019-08-09 11:56:42 +02:00

README.md

syzkaller - kernel fuzzer

syzkaller is an unsupervised coverage-guided kernel fuzzer.
Supported OSes: Akaros, FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows.

Mailing list: syzkaller@googlegroups.com (join on web or by email).

Found bugs: Akaros, Darwin/XNU, FreeBSD, Linux, NetBSD, OpenBSD, Windows.

Documentation

Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Most of the documentation at this moment is related to the Linux kernel. For other OS kernels check: Akaros, Darwin/XNU, FreeBSD, Fuchsia, NetBSD, OpenBSD, Windows, gVisor.

External Articles

Research work based on syzkaller
From HardenedLinux project:
- Kernel QA with syzkaller and qemu (tutorial on how to setup syzkaller with qemu)
- Syzkaller crash DEMO (tutorial on how to extend syzkaller with new syscalls)
- Kernel debug tool with syzkaller (debugging qemu VM created by syz-manager with gdb)
- Explanation of some syzkaller internals
- A example of fuzzing the ceph filesystem
Coverage-guided kernel fuzzing with syzkaller (by David Drysdale)
ubsan, kasan, syzkaller und co (video) (by Florian Westphal)
Debugging a kernel crash found by syzkaller (by Quentin Casasnovas)
Linux Plumbers 2016 talk slides
syzkaller: the next gen kernel fuzzer (basics of operations, tutorial on how to run syzkaller and how to extend it to fuzz new drivers)
syzbot and the tale of thousand kernel bugs [video]

Disclaimer

This is not an official Google product.