Přístupnostní navigace
E-application
Search Search Close
Publication detail
MARHEFKA, M. MÜLLER, P.
Original Title
Dfuzzer: A D-Bus Service Fuzzing Tool
Type
conference paper
Language
English
Original Abstract
We present Dfuzzer, a fully automated tool for fuzz testing programs communicating via D-Bus. D-Bus is the prevalent modern mechanism for an inter-process communication in the GNU/Linux ecosystem. Using D-Bus introspection, Dfuzzer is able to acquire the structure of the parameters expected by the target program. It can then generate ballast data respecting this structure, so the target program starts using such data incorrectly if it does not carefully validate it. We have found numerous bugs in various parts of the GNU/Linux operating system, including GNOME Shell and systemd.
Keywords
D-Bus fuzzer fuzz testing automated testing pseudo-random data generation IPC
Authors
MARHEFKA, M.; MÜLLER, P.
RIV year
2014
Released
31. 3. 2014
Publisher
IEEE Computer Society
Location
Cleveland
ISBN
978-0-7695-5194-4
Book
Proceedings of IEEE Seventh International Conference on Software Testing, Verification and Validation Workshopsn
Pages from
383
Pages to
389
Pages count
7
BibTex
@inproceedings{BUT111536, author="Matúš {Marhefka} and Petr {Müller}", title="Dfuzzer: A D-Bus Service Fuzzing Tool", booktitle="Proceedings of IEEE Seventh International Conference on Software Testing, Verification and Validation Workshopsn", year="2014", pages="383--389", publisher="IEEE Computer Society", address="Cleveland", doi="10.1109/ICSTW.2014.51", isbn="978-0-7695-5194-4" }