Awesome

roughenough-fuzz

This crate is for fuzzing Roughenough, a Rust implementation of the Roughtime secure time synchronization protocol.

Building and Installation

Fuzzing uses American fuzzy lop via afl.rs, libFuzzer via cargo-fuzz, and honggfuzz via honggfuzz-rs.

To install:

cargo install afl cargo-fuzz honggfuzz

FYI, Ubuntu 17.10 needed the binutils-dev and libunwind-dev packages to compile cargo-fuzz. YMMV.

AFL and linker issues

If your build fails with a message about __sancov_guards similar to:

/usr/bin/ld: __sancov_guards has both ordered [__sancov_guards[...]] sections
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status

You've encountered Rust issue 53945. A work-around is to use gold for linking:

RUSTFLAGS="-Clink-arg=-fuse-ld=gold" cargo afl build --release --bin afl_server_target

Running

$ cd roughenough-fuzz

# Run AFL
$ cargo afl build --release --bin afl_target
$ cargo afl fuzz -i in -o out -x dictionary.txt target/release/afl_target

# Run libFuzzer
$ cargo fuzz run -O fuzz_target_1 -- -dict=dictionary.txt -max_len=2048

# Run honggfuzz
$ HFUZZ_RUN_ARGS="--dict dictionary.txt --max_file_size 2048 --input in/" cargo hfuzz run hfuzz_target

Contributors

Stuart Stock (stuart {at} int08h.com)
Aaron Hill (aa1ronham {at} gmail.com)

Copyright and License

int08h LLC licenses roughenough-fuzz (the "Software") to you under the Apache License, version 2.0 (the "License"); you may not use this Software except in compliance with the License. You may obtain a copy of the License from the LICENSE file included with the Software or at:

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.