2019-08-06 20:29:19 +00:00
|
|
|
---
|
|
|
|
|
layout: default
|
|
|
|
|
title: OSS-Fuzz
|
|
|
|
|
permalink: /
|
|
|
|
|
nav_order: 1
|
|
|
|
|
has_children: true
|
2019-08-09 19:24:43 +00:00
|
|
|
has_toc: false
|
2019-08-06 20:29:19 +00:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# OSS-Fuzz
|
|
|
|
|
|
2020-07-16 22:27:29 +00:00
|
|
|
[Fuzz testing] is a well-known technique for uncovering programming errors in
|
|
|
|
|
software. Many of these detectable errors, like [buffer overflow], can have
|
|
|
|
|
serious security implications. Google has found [thousands] of security
|
|
|
|
|
vulnerabilities and stability bugs by deploying [guided in-process fuzzing of
|
|
|
|
|
Chrome components], and we now want to share that service with the open source
|
|
|
|
|
community.
|
|
|
|
|
|
|
|
|
|
[Fuzz testing]: https://en.wikipedia.org/wiki/Fuzz_testing
|
|
|
|
|
[buffer overflow]: https://en.wikipedia.org/wiki/Buffer_overflow
|
2019-08-09 19:35:14 +00:00
|
|
|
[thousands]: https://bugs.chromium.org/p/chromium/issues/list?q=label%3AStability-LibFuzzer%2CStability-AFL%20-status%3ADuplicate%2CWontFix&can=1
|
2020-07-16 22:27:29 +00:00
|
|
|
[guided in-process fuzzing of Chrome components]: https://security.googleblog.com/2016/08/guided-in-process-fuzzing-of-chrome.html
|
|
|
|
|
|
|
|
|
|
In cooperation with the [Core Infrastructure Initiative], OSS-Fuzz aims to make
|
|
|
|
|
common open source software more secure and stable by combining modern fuzzing
|
|
|
|
|
techniques with scalable, distributed execution.
|
|
|
|
|
|
|
|
|
|
[Core Infrastructure Initiative]: https://www.coreinfrastructure.org/
|
|
|
|
|
|
|
|
|
|
We support the [libFuzzer], [AFL], and [Honggfuzz] fuzzing engines in
|
|
|
|
|
combination with [Sanitizers], as well as [ClusterFuzz], a distributed fuzzer
|
|
|
|
|
execution environment and reporting tool.
|
2019-08-09 19:35:14 +00:00
|
|
|
|
2020-07-16 22:27:29 +00:00
|
|
|
[libFuzzer]: https://llvm.org/docs/LibFuzzer.html
|
|
|
|
|
[AFL]: https://lcamtuf.coredump.cx/afl/
|
|
|
|
|
[Honggfuzz]: https://github.com/google/honggfuzz
|
|
|
|
|
[Sanitizers]: https://github.com/google/sanitizers
|
|
|
|
|
[ClusterFuzz]: https://github.com/google/clusterfuzz
|
2019-08-06 20:29:19 +00:00
|
|
|
|
2020-07-16 22:27:29 +00:00
|
|
|
Currently, OSS-Fuzz supports C/C++, Rust, and Go code. Other languages supported
|
|
|
|
|
by [LLVM] may work too. OSS-Fuzz supports fuzzing x86_64 and i386 builds.
|
2019-08-06 20:29:19 +00:00
|
|
|
|
2020-07-16 22:27:29 +00:00
|
|
|
[LLVM]: https://llvm.org
|
2019-08-06 20:29:19 +00:00
|
|
|
|
2020-01-13 01:14:20 +00:00
|
|
|
## Learn more about fuzzing
|
|
|
|
|
|
2020-07-16 22:27:29 +00:00
|
|
|
This documentation describes how to use OSS-Fuzz service for your open source
|
|
|
|
|
project. To learn more about fuzzing in general, we recommend reading [libFuzzer
|
|
|
|
|
tutorial] and the other docs in [google/fuzzing] repository. These and some
|
|
|
|
|
other resources are listed on the [useful links] page.
|
2020-01-13 01:14:20 +00:00
|
|
|
|
|
|
|
|
[google/fuzzing]: https://github.com/google/fuzzing/tree/master/docs
|
|
|
|
|
[libFuzzer tutorial]: https://github.com/google/fuzzing/blob/master/tutorial/libFuzzerTutorial.md
|
2020-07-16 22:27:29 +00:00
|
|
|
[useful links]: {{ site.baseurl }}/reference/useful-links/#tutorials
|
2020-01-13 01:14:20 +00:00
|
|
|
|
2019-08-06 20:29:19 +00:00
|
|
|
## Trophies
|
2020-07-16 22:27:29 +00:00
|
|
|
As of June 2020, OSS-Fuzz has found over [20,000] bugs in [300] open source
|
|
|
|
|
projects.
|
2019-08-06 20:29:19 +00:00
|
|
|
|
2020-06-12 23:02:41 +00:00
|
|
|
[20,000]: https://bugs.chromium.org/p/oss-fuzz/issues/list?q=-status%3AWontFix%2CDuplicate%20-component%3AInfra&can=1
|
|
|
|
|
[300]: https://github.com/google/oss-fuzz/tree/master/projects
|
