Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-07-10 Thread Renáta Hodován
On 07/02/2013 11:23 PM, Dean Jackson wrote: Is it out yet? Yes, you can find the first post of the series here: http://webkit.sed.hu/blog/20130710/fuzzinator-mutation-and-generation-based-browser-fuzzer Cheers, Reni ___ webkit-dev mailing list

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-07-02 Thread Dean Jackson
On 27/06/2013, at 2:48 AM, Renáta Hodován hodo...@inf.u-szeged.hu wrote: On 06/26/2013 12:30 AM, Zoltan Horvath wrote: Hey Reni, This project sounds cool! I think you will answer some of my questions in your blog post, so I don't ask just one now... Do you know the date it's going to

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-28 Thread Renáta Hodován
Actually yes. If you wrote the language specific parts, you can extend it arbitrarily. Reni On 06/27/2013 11:28 AM, Balazs Kelemen wrote: On 06/27/2013 10:21 AM, Renáta Hodován wrote: Hi Dave, This is a good idea! What's more it seems it's not so hard to add MathML support to the fuzzer.

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-27 Thread Renáta Hodován
Hi Dave, This is a good idea! What's more it seems it's not so hard to add MathML support to the fuzzer. Maybe in a few days (or in worst case next week) I can put it into it. Cheers, Reni On 06/27/2013 01:01 AM, David Kilzer wrote: This is great! You mentioned in a follow-up that you

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-27 Thread Balazs Kelemen
On 06/27/2013 10:21 AM, Renáta Hodován wrote: Hi Dave, This is a good idea! What's more it seems it's not so hard to add MathML support to the fuzzer. Maybe in a few days (or in worst case next week) I can put it into it. I think the question was about whether your system is modularized

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-26 Thread Renáta Hodován
On 06/25/2013 09:48 PM, Benjamin Poulain wrote: On Tue, Jun 25, 2013 at 1:56 AM, Renáta Hodován hodo...@inf.u-szeged.hu mailto:hodo...@inf.u-szeged.hu wrote: as many of you know already I'm working on an universal web fuzzer, which is able to generate random test cases for both svg,

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-26 Thread Ryosuke Niwa
Hi Renáta, Thanks for undertaking this effort. Is it possible for your fuzzer to run under guard malloc or ASAN(AddressSanitizer) and catch security problems? We could also improve our annotation in the codebase to use ASSERT_WITH_SECURITY_IMPLICATION if that helps. - R. Niwa On Tue, Jun 25,

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-26 Thread Renáta Hodován
On 06/26/2013 12:30 AM, Zoltan Horvath wrote: Hey Reni, This project sounds cool! I think you will answer some of my questions in your blog post, so I don't ask just one now... Do you know the date it's going to be published? Hopefully next week you can read it ;)

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-26 Thread Renáta Hodován
Hey, On 06/26/2013 06:51 PM, Ryosuke Niwa wrote: Hi Renáta, Thanks for undertaking this effort. Is it possible for your fuzzer to run under guard malloc or ASAN(AddressSanitizer) and catch security problems? ofc it's possible. You can run it with any browser and with any options. We could

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-26 Thread David Kilzer
On Jun 25, 2013, at 1:56 AM, Renáta Hodován hodo...@inf.u-szeged.hu wrote: Hi folks, as many of you know already I'm working on an universal web fuzzer, which is able to generate random test cases for both svg, html, css and js, and test them against any browser. With this method we can

[webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-25 Thread Renáta Hodován
Hi folks, as many of you know already I'm working on an universal web fuzzer, which is able to generate random test cases for both svg, html, css and js, and test them against any browser. With this method we can catch crashes, assertions, memory corruptions and all the funny things. A few

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-25 Thread Benjamin Poulain
On Tue, Jun 25, 2013 at 1:56 AM, Renáta Hodován hodo...@inf.u-szeged.huwrote: as many of you know already I'm working on an universal web fuzzer, which is able to generate random test cases for both svg, html, css and js, and test them against any browser. With this method we can catch

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-25 Thread Zoltan Horvath
Hey Reni, This project sounds cool! I think you will answer some of my questions in your blog post, so I don't ask just one now... Do you know the date it's going to be published? Cheers, Zoltan On Tue, Jun 25, 2013 at 1:14 PM, Philip Rogers p...@google.com wrote: +1 to fuzzing! If this

Re: [webkit-dev] Fuzzinator, a mutation based web fuzzer

2013-06-25 Thread qx
Renáta Hodován skrev 2013-06-25 11:56: Hi folks, as many of you know already I'm working on an universal web fuzzer, which is able to generate random test cases for both svg, html, css and js, and test them against any browser. With this method we can catch crashes, assertions, memory