Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update glossary.md

This commit is contained in:
Kostya Serebryany 2016-11-21 16:29:42 -08:00 committed by GitHub
parent 4301e35cc9
commit 67fab0024d
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
docs/glossary.md
View File

@ -30,13 +30,20 @@ This is what we call **Library Configuration**.
## Fuzzing Engine ## Fuzzing Engine
A program that tries to find interesting inputs for a Fuzz Target by executing it. A tool that tries to find interesting inputs for a Fuzz Target by executing it.
Examples: [libFuzzer](http://lbfuzzer.info), Examples: [libFuzzer](http://lbfuzzer.info),
[AFL](lcamtuf.coredump.cx/afl/), [AFL](lcamtuf.coredump.cx/afl/),
[honggfuzz](https://github.com/google/honggfuzz), etc [honggfuzz](https://github.com/google/honggfuzz), etc
See also [Mutation Engine](#mutation-engine) and [Test Generator](#test-generator). See also [Mutation Engine](#mutation-engine) and [Test Generator](#test-generator).
## Fuzzer build
A binary built for a [fuzz target](#fuzz-target) for a specific [fuzzing engine](#fuzzing-engine),
in a specific build mode (e.g. with enabled or disabled assertions),
optionally combined with a [sanitizer](#sanitizer).
## Test Input ## Test Input
A sequence of bytes that is used as the input to a Fuzz Target. A sequence of bytes that is used as the input to a Fuzz Target.
Typicaly, a test input is stored in a separate file. Typicaly, a test input is stored in a separate file.
@ -58,6 +65,15 @@ Example: [Radamsa](https://github.com/aoh/radamsa),
A tool that generates testcases according to some rules or grammar. A tool that generates testcases according to some rules or grammar.
Example: [csmith](https://embed.cs.utah.edu/csmith/) (a test generator for the C language). Example: [csmith](https://embed.cs.utah.edu/csmith/) (a test generator for the C language).
## Sanitizer
A dynamic testing tool that can detect bugs during program execution.
An incomplete list:
[ASan](http://clang.llvm.org/docs/AddressSanitizer.html),
[MSan](http://clang.llvm.org/docs/MemorySanitizer.html),
[TSan](http://clang.llvm.org/docs/ThreadSanitizer.html),
[LSan](http://clang.llvm.org/docs/LeakSanitizer.html),
[UBSan](http://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html).
## Fuzzer ## Fuzzer
The most overloaded term, which makes it bad (maybe, we should try avoiding it?). The most overloaded term, which makes it bad (maybe, we should try avoiding it?).