mirror of https://github.com/reactos/syzkaller.git synced 2024-11-24 03:49:45 +00:00

syzkaller is an unsupervised coverage-guided kernel fuzzer

Go to file

Andrey Konovalov e99d004deb executor: use NONFAILING in common_usb.h Also move some code to helper functions.		2019-04-23 23:42:31 +03:00
dashboard	all: fix some static analysis warnings	2019-04-23 17:58:54 +03:00
docs	Update research.md	2019-04-22 11:26:08 +03:00
executor	executor: use NONFAILING in common_usb.h	2019-04-23 23:42:31 +03:00
Godeps	vendor/github.com/google/go-cmp: update to HEAD	2019-03-17 18:06:44 +01:00
pkg	executor: use NONFAILING in common_usb.h	2019-04-23 23:42:31 +03:00
prog	prog: fix crash in createResource	2019-04-23 18:59:49 +03:00
sys	sys/freebsd: Add pf ioctl()s	2019-04-23 15:55:07 +02:00
syz-ci	syz-ci: stricter verification of instance names	2019-04-10 15:53:23 +02:00
syz-fuzzer	all: add optional close_fds feature to reproducers	2019-04-09 10:53:11 +02:00
syz-hub	syz-manager: factor out rpc serving part	2018-12-26 10:58:23 +01:00
syz-manager	dashboard/app: properly handle build failures	2019-03-25 17:00:25 +01:00
tools	sys: add USB descriptions	2019-04-11 16:24:45 +02:00
vendor	vendor/github.com/google/go-cmp: update to HEAD	2019-03-17 18:06:44 +01:00
vm	all: fix some static analysis warnings	2019-04-23 17:58:54 +03:00
.clang-format	buildbot: add .travis.yml	2017-07-28 13:25:48 +02:00
.gitignore	sys: check in generated files	2017-06-13 15:55:31 +02:00
.golangci.yml	.golangci.yml: update	2019-04-23 17:58:54 +03:00
.gometalinter.json	tools/syz-trace2syz: add tool to convert strace output to programs	2018-12-06 16:25:37 +01:00
.travis.yml	all: switch to Go 1.12	2019-03-14 14:55:59 +01:00
AUTHORS	sys/targets: fix arm target compiler prefix	2019-04-04 14:57:50 +02:00
CODE_OF_CONDUCT.md	Create CODE_OF_CONDUCT.md	2019-02-04 12:05:04 +01:00
CONTRIBUTORS	sys/targets: fix arm target compiler prefix	2019-04-04 14:57:50 +02:00
fuzz.yaml	prog/test: rename prog/fuzz to prog/test	2019-04-01 12:20:19 +02:00
LICENSE	initial commit	2015-10-12 10:16:57 +02:00
Makefile	.golangci.yml: update	2019-04-23 17:58:54 +03:00
README.md	docs: add new line in README.md	2019-03-01 11:33:01 +01:00

README.md

syzkaller - kernel fuzzer

syzkaller is an unsupervised coverage-guided kernel fuzzer.
Supported OSes: Akaros, FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows.

Mailing list: syzkaller@googlegroups.com (join on web or by email).

Found bugs: Akaros, Darwin/XNU, FreeBSD, Linux, NetBSD, OpenBSD, Windows.

Documentation

Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Most of the documentation at this moment is related to the Linux kernel. For other OS kernels check: Akaros, Darwin/XNU, FreeBSD, Fuchsia, NetBSD, OpenBSD, Windows, gVisor.

External Articles

Research work based on syzkaller
From HardenedLinux project:
- Kernel QA with syzkaller and qemu (tutorial on how to setup syzkaller with qemu)
- Syzkaller crash DEMO (tutorial on how to extend syzkaller with new syscalls)
- Kernel debug tool with syzkaller (debugging qemu VM created by syz-manager with gdb)
- Explanation of some syzkaller internals
- A example of fuzzing the ceph filesystem
Coverage-guided kernel fuzzing with syzkaller (by David Drysdale)
ubsan, kasan, syzkaller und co (video) (by Florian Westphal)
Debugging a kernel crash found by syzkaller (by Quentin Casasnovas)
Linux Plumbers 2016 talk slides
syzkaller: the next gen kernel fuzzer (basics of operations, tutorial on how to run syzkaller and how to extend it to fuzz new drivers)
syzbot and the tale of thousand kernel bugs [video]

Disclaimer

This is not an official Google product.