Be the first to like this
Americal Fuzzy Lop (AFL) is a fuzzer that uses code coverage and genetic algorithms to automatically find "interesting" inputs: in particular, inputs which will crash your code. Andrew Cooper hooked it up Xen's x86 instruction decoder to AFL and within an hour it found a bug which had been introduced in the 4.8 development window. I extended that work to test the full emulator, and with a few days of tweaking and iterating, AFL had produced over 6,000 unique test cases which gave us nearly 97% code coverage.
This talk will give an overview of our experience with AFL, to help give you a better understanding of the usefulness of this new tool.