X Tutup
The Wayback Machine - https://web.archive.org/web/20200911122953/https://github.com/google/clusterfuzz
Skip to content

/ clusterfuzz

Scalable fuzzing infrastructure.

google.github.io/clusterfuzz
Apache-2.0 License
4.3k stars 387 forks
Star
Watch
master
124 branches 20 tags
Go to file
Code

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Latest commit

@eepeep
eepeep [fuchsia] Work around bug in older builds with newer KVM (#2017)
cc68273 Sep 11, 2020
[fuchsia] Work around bug in older builds with newer KVM (#2017) 
* [fuchsia] Work around bug in older builds with newer KVM

Newer KVM versions exposed a bug that caused Fuchsia to fail to boot.
This was previously fixed on the Fuchsia side, but requires a
ClusterFuzz-side workaround in order to be able to run builds from
before that fix rolled (e.g. when bisecting).

This commit also adds the `invtsc` feature to the QEMU CPU config to
bring it in line with Fuchsia defaults and improve performance, and
makes it slightly easier to reproduce the QEMU commands run by
ClusterFuzz.

* use shlex.quote
cc68273

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
bot
 
 
configs/test
 
 
docker
 
 
docs
 
 
local
 
 
resources
 
 
src
 
 
.bowerrc
 
 
.coveragerc
 
 
.gitignore
 
 
.pylintrc
 
 
.style.yapf
 
 
.travis.yml
 
 
CHANGELOG.md
 
 
CONTRIBUTING.md
 
 
LICENSE
 
 
Pipfile
 
 
Pipfile.lock
 
 
README.md
 
 
bower.json
 
 
butler.py
 
 
cloudbuild.yaml
 
 
reproduce.sh
 
 

README.md

ClusterFuzz

ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software.

Google uses ClusterFuzz to fuzz the Chrome Browser and as the fuzzing backend for OSS-Fuzz.

ClusterFuzz provides many features which help seamlessly integrate fuzzing into a software project's development process:

  • Highly scalable. Google's internal instance runs on over 25,000 machines.
  • Accurate deduplication of crashes.
  • Fully automatic bug filing and closing for issue trackers (Monorail only for now).
  • Testcase minimization.
  • Regression finding through bisection.
  • Statistics for analyzing fuzzer performance, and crash rates.
  • Easy to use web interface for management and viewing crashes.
  • Firebase authentication.
  • Support for coverage guided fuzzing (e.g. libFuzzer and AFL) and blackbox fuzzing.

Overview

Documentation

You can find detailed documentation here.

Trophies

As of January 2019, ClusterFuzz has found ~16,000 bugs in Chrome and ~11,000 bugs in over 160 open source projects integrated with OSS-Fuzz.

Getting Help

You can file an issue to ask questions, request features, or ask for help.

Staying Up to Date

We will use clusterfuzz-announce(#)googlegroups.com to make announcements about ClusterFuzz.

About

Scalable fuzzing infrastructure.

google.github.io/clusterfuzz

Topics

fuzzing security stability vulnerabilities

Resources

Readme

License

Apache-2.0 License

Releases 20

2.1.0 Latest
Aug 5, 2020
+ 19 releases

Packages

No packages published

Contributors 30

+ 19 contributors

Languages

You can’t perform that action at this time.
X Tutup