[Wireshark-dev] [GSoC 2013] Improved Fuzzing

[Rohit]

Hi,

I am Rohit, I am interested in 'Improved Fuzzing' project. I have couple of
questions related to project. Please find them below.

1. Could you please suggest me some techniques that I can look in to for
improving fuzzing for better code coverage?

2. Could you also let me know where to look for current fuzzing code?

Regards,
Rohit.
___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

[Wireshark-dev] [GSoC 2013] Improved Fuzzing

[Rohit]

Hi,

I am Rohit, Ph.D. candidate in CS at University Of Georgia. My Research
interests lie at the intersection of Distributed Systems and Networking.

I am interested in 'improved fuzzing' project. I have basic idea of random
fuzzing and symbolic execution. I have couple of couple of questions
related to project. Could you please let me know if I can discuss the
project?

Regards,
Rohit.
___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] [Wireshark-Dev] GSoC 2013: Improved Fuzzing

[Gerald Combs]

Our current fuzz tests are run using the fuzz-test.sh and run-randpkt.sh
scripts in the "tools" directory in the Wireshark sources. fuzz-test.sh
uses editcap to introduce errors in existing capture files and
run-randpkt.sh uses randpkt to create packets with random contents.
We've been able to find many bugs with each script but each approach is
naive and inefficient. Neither uses modern fuzzing techniques such as
code coverage analysis.

On 4/14/13 8:49 PM, Ninh Khong wrote:
> Dear Sirs,
>
> I am a CS student from Ho Chi Minh City University of Technology. I
> have learnt the information regarding the GSoC project ideas and am
> really exciting to know about Project Improved Fuzzing of Wireshark.
>
> While I am interested in applying and joining this, I might need your
> clarification on the below:
>
> 1. It is my intention to apply Smart Fuzzing to find bugs. Can you
> please suggest me any pointers/references specifically related to the
> smart fuzzing which you have used before to find vuln of Wireshark.
> 2. I am only going to do Smart Fuzzing Wireshark on the Linux OS. It
> has limitation but I think it is fine with the period of three months.
> Can you please advise whether the above is working?
>
> I would appreciate any reply from Gerald Comb at your earliest
> convenience.
>
> Many thanks
>
> Yours sincerely,
>
> -- 
> -- 
> Faculty of Computer Science '08
> University of Technology 
> Cell Phone: 0977 475 249
> Mail: ninhkhongd...@gmail.com 
> Y!M : thieugianhangheo_06 
>
>
>
> ___
> Sent via:Wireshark-dev mailing list 
> Archives:http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>  mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

[Wireshark-dev] [Wireshark-Dev] GSoC 2013: Improved Fuzzing

[Ninh Khong]

Dear Sirs,

I am a CS student from Ho Chi Minh City University of Technology. I have
learnt the information regarding the GSoC project ideas and am really
exciting to know about Project Improved Fuzzing of Wireshark.

While I am interested in applying and joining this, I might need your
clarification on the below:

1. It is my intention to apply Smart Fuzzing to find bugs. Can you please
suggest me any pointers/references specifically related to the smart
fuzzing which you have used before to find vuln of Wireshark.
2. I am only going to do Smart Fuzzing Wireshark on the Linux OS. It has
limitation but I think it is fine with the period of three months. Can you
please advise whether the above is working?

I would appreciate any reply from Gerald Comb at your earliest convenience.

Many thanks

Yours sincerely,

-- 
-- 
Faculty of Computer Science '08
University of Technology
Cell Phone: 0977 475 249
Mail: ninhkhongd...@gmail.com
Y!M : thieugianhangheo_06
___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe