Fuzzer Crash Root Cause Analysis With ASAN (AddressSanitizer)
Now that we found a crash and got a minimal testcase last episode, we can now try to find the true location of the overflow. ASan is an invaluable tool for that.
Fuzzing Project:
Grab the files:
Full Playlist:
Episode 6:
00:00 - Intro
00:47 - Create sudo ASan build
01:47 - Investigating weird issue
04:14 - Accidentally solving the problem
05:10 - Improve AddressSanitizer Debug Output
06:49 - Interpreting AddressSanitizer Output
07:23 - Triaging More Unique Crashes
08:25 - Plan For Next Steps
-=[ ❤️ Support ]=-
→ per Video:
→ per Month:
-=[ 🐕 Social ]=-
→ Twitter:
→ Website:
→ Subreddit:
→ Facebook:
1 view
1
0
1 year ago 00:24:11 1
Finding The .webp Vulnerability in 8s (Fuzzing with AFL++)
3 years ago 01:12:39 1
Manuel Rigger, Ilya Yatsishin — Using SQLancer to test ClickHouse and other database systems
4 years ago 00:09:32 1
Fuzzer Crash Root Cause Analysis With ASAN (AddressSanitizer)