Skip to content

Fuzzing for Roughenough, a Rust implementation of the Roughtime secure time sync protocol

License

Notifications You must be signed in to change notification settings

int08h/roughenough-fuzz

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

roughenough-fuzz

crates.io Apache License 2

This crate is for fuzzing Roughenough, a Rust implementation of the Roughtime secure time synchronization protocol.

Building and Installation

Fuzzing uses American fuzzy lop via afl.rs, libFuzzer via cargo-fuzz, and honggfuzz via honggfuzz-rs.

To install:

  • cargo install afl cargo-fuzz honggfuzz

FYI, Ubuntu 17.10 needed the binutils-dev and libunwind-dev packages to compile cargo-fuzz. YMMV.

AFL and linker issues

If your build fails with a message about __sancov_guards similar to:

/usr/bin/ld: __sancov_guards has both ordered [__sancov_guards[...]] sections
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status

You've encountered Rust issue 53945. A work-around is to use gold for linking:

RUSTFLAGS="-Clink-arg=-fuse-ld=gold" cargo afl build --release --bin afl_server_target

Running

$ cd roughenough-fuzz

# Run AFL
$ cargo afl build --release --bin afl_target
$ cargo afl fuzz -i in -o out -x dictionary.txt target/release/afl_target

# Run libFuzzer
$ cargo fuzz run -O fuzz_target_1 -- -dict=dictionary.txt -max_len=2048

# Run honggfuzz
$ HFUZZ_RUN_ARGS="--dict dictionary.txt --max_file_size 2048 --input in/" cargo hfuzz run hfuzz_target

Links

Contributors

  • Stuart Stock (stuart {at} int08h.com)
  • Aaron Hill (aa1ronham {at} gmail.com)

Copyright and License

roughenough-fuzz is copyright (c) 2018-2019 int08h LLC. All rights reserved.

int08h LLC licenses roughenough-fuzz (the "Software") to you under the Apache License, version 2.0 (the "License"); you may not use this Software except in compliance with the License. You may obtain a copy of the License from the LICENSE file included with the Software or at:

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

About

Fuzzing for Roughenough, a Rust implementation of the Roughtime secure time sync protocol

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages