[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[lwip-devel] Reporting crashes found by running a fuzzing campaign
|
From: |
Hiromasa Ito |
|
Subject: |
[lwip-devel] Reporting crashes found by running a fuzzing campaign |
|
Date: |
Tue, 19 Nov 2019 15:20:20 +0900 |
|
User-agent: |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.2.2 |
Hi, all.
I have written a new test driver and ran a fuzzing campaign on lwIP with
American Fuzzy Lop (AFL).
As a result, I have found nine crashes caused by assertion failures, and they
seem to be bugs.
I have already reported two of them, but still have seven crashes not reported.
https://savannah.nongnu.org/bugs/?51447
https://savannah.nongnu.org/bugs/?55706
There for, I have two questions for developers.
First, how should I report these unreported crashes?
Should I report them individually, like the ones above?
If needed, I can upload the test driver, crashed inputs, and the source codes
of lwIP I used.
Second, can I write about these crashes in my academic paper?
I'm a master's student in computer science in Japan.
If any bugs cause these crashes, I'd like to write about them in my paper.
If it is inconvenient, please let me know.
Best regards,
Hiromasa