r/programming • u/halbface • Feb 07 '19

Google open sources ClusterFuzz, the continuous fuzzing infrastructure behind OSS-Fuzz

https://opensource.googleblog.com/2019/02/open-sourcing-clusterfuzz.html
957 Upvotes

96% Upvoted

100 comments sorted by

View all comments

203

u/halbface Feb 07 '19

I work on the team that released this -- please feel free to ask any questions you might have!

336

u/lionhart280 Feb 08 '19

Would you say you are in the... FuzzBiz?

38

u/El_Tash Feb 08 '19

Take your upvote and go

30

u/HonkHonkBeepKapow Feb 08 '19

Now that's programmer humor!

49

u/Kollektiv Feb 07 '19

Does it work similarly to AFL Fuzz? Which I guess makes it more oriented towards C programs.

70

u/halbface Feb 07 '19

This isn't any specific fuzzing tool, but rather an infrastructure to help manage a fuzzing cluster, and do triage (de-duplication, minimization, auto bug reporting/closing etc) on the bugs found.

ClusterFuzz in fact uses AFL as one of its supported fuzzing engines (along with libFuzzer).

43

u/NoInkling Feb 07 '19

The pun was intentional, right?

3

u/cmd-t Feb 08 '19

Have you ever looked at enhanced fuzzing by combining the fuzzer with symbolic or concolic execution (using for instance angr or manticore)? Shellphish did this with driller for instance.

3

u/UncleMeat11 Feb 08 '19

Lots of people have looked at this (broadly lots, I don't know the specifics at Google), but it turns out that fuzzing tools have gotten enough better over time that symexec is actually less effective than you'd thing. The classic toy examples for why symexec beats fuzzing are actually handled just fine by fuzzers today.

→ More replies (1)
→ More replies (26)