Home

Awesome

UniBench

20 benchmark programs

If you are going to fuzz these programs, checkout our Dockerfile repo for building with fuzzers!

Structed Data (id, prog, commandline, seed_folder)

seed files

data = [
    #id, prog, commandline, seed_folder
    [1, "exiv2", "@@", "jpg"],
    [2,"tiffsplit","@@","tiff"],
    [3,"mp3gain","@@","mp3"],
    [4,"wav2swf","-o /dev/null @@","wav"],
    [5,"pdftotext","@@ /dev/null","pdf"],
    [6,"infotocap","-o /dev/null @@","text"],
    [7,"mp42aac","@@ /dev/null","mp4"],
    [8,"flvmeta","@@","flv"],
    [9,"objdump","-S @@","obj"],
    [14, "tcpdump", "-e -vv -nr @@", "tcpdump100"],
    [15, "ffmpeg", "-y -i @@ -c:v mpeg4 -c:a copy -f mp4 /dev/null", "ffmpeg100"],
    [16, "gdk-pixbuf-pixdata", "@@ /dev/null", "pixbuf"],
    [17, "cflow", "@@", "cflow"],
    [18, "nm-new", "-A -a -l -S -s --special-syms --synthetic --with-symbol-versions -D @@", "nm"],
    [19, "sqlite3", " < @@", "sql"],
    [20, "lame3.99.5", "@@ /dev/null", "lame3.99.5"],
    [21, "jhead", "@@", "jhead"],
    [22, "imginfo", "-f @@", "imginfo"],
    [23, "jq", ". @@", "json"],
    [24, "mujs", "@@", "mujs"],
    # below is the LAVA-M settings
    [10,"uniq","@@","uniq"],
    [11,"base64","-d @@","base64"],
    [12,"md5sum","-c @@","md5sum"],
    [13,"who","@@","who"],
]

Image

ProgramVersionOfficial WebsiteGet LatestIssueFuzzing ArgumentsCVE
exiv20.26https://www.exiv2.org/https://github.com/Exiv2/exiv2github@@link
gdk-pixbuf-pixdatagdk-pixbuf 2.31.1https://developer.gnome.org/gdk-pixbuf/https://gitlab.gnome.org/GNOME/gdk-pixbufgitlab@@ /dev/nulllink
imginfojasper 2.0.12https://www.ece.uvic.ca/~frodo/jasper/https://github.com/mdadams/jaspergithub bugzilla-f @@link
jhead3.00https://www.sentex.ca/~mwandel/jhead/Bugzilla redhat ubuntu@@link
tiffsplitlibtiff 3.9.7https://gitlab.com/libtiff/libtiffhttps://gitlab.com/libtiff/libtiffgitlab@@link

Audio

Attention: running mp3gain may change the input file, make a copy of your crash files before validating, otherwise you may not be able to reproduce crashes.

ProgramVersionOfficial WebsiteGet LatestIssueFuzzing ArgumentsCVE link
lame3.99.5https://lame.sourceforge.io/https://sourceforge.net/p/lame/svn/HEAD/tree/trunk/lame/sourceforge@@ /dev/nulllink
mp3gain1.5.2http://mp3gain.sourceforge.net/https://sourceforge.net/p/mp3gain/code/ci/master/tree/mp3gain/sourceforge@@ (Attention: input file will be overwritten)link
wav2swfswftools 0.9.2http://swftools.org/https://github.com/matthiaskramm/swftoolsgithub-o /dev/null @@link

Video

ProgramVersionOfficial WebsiteGet LatestIssueFuzzing ArgumentsCVE link
ffmpeg4.0.1https://www.ffmpeg.org/https://git.ffmpeg.org/ffmpeg.gitdebian-y -i @@ -c:v mpeg4 -c:a copy -f mp4 /dev/nulllink
flvmeta1.2.1https://www.flvmeta.com/https://github.com/noirotm/flvmetagithub@@N.A.
mp42aacBento4 1.5.1-628https://www.bento4.com/https://github.com/axiomatic-systems/Bento4github@@ /dev/nulllink

Text

Note: infotocap is actually binary tic, the name infotocap should not be changed. This is like busybox, which functionality is determined by its binary name

ProgramVersionOfficial WebsiteGet LatestIssueFuzzing ArgumentsCVE link
cflow1.6https://www.gnu.org/software/cflow/https://git.savannah.gnu.org/cgit/cflow.gitmaillist bug-cflow@gnu.org@@link
infotocapncurses 6.1https://www.gnu.org/software/ncurses/http://invisible-mirror.net/archives/ncurses/current/maillist bug-ncurses@gnu.org-o /dev/null @@link
jq1.5https://stedolan.github.io/jq/https://github.com/stedolan/jqgithub. @@link
mujs1.0.2https://mujs.com/https://github.com/ccxvii/mujsgithub bugzilla@@link
pdftotext4.00https://www.xpdfreader.com/https://www.xpdfreader.com/download.htmlforum@@ /dev/nulllink
sqlite3SQLite 3.8.9https://www.sqlite.org/index.htmlhttps://www.sqlite.org/cgi/src/doc/trunk/README.mdtickets(stdin)link

Binary

ProgramVersionOfficial WebsiteGet LatestIssueFuzzing ArgumentsCVE link
nmbinutils 5279478https://www.gnu.org/software/binutils/http://sourceware.org/git/?p=binutils-gdb.gitbugzilla-A -a -l -S -s --special-syms --synthetic --with-symbol-versions -D @@link
objdumpbinutils 2.28https://www.gnu.org/software/binutils/http://sourceware.org/git/?p=binutils-gdb.gitbugzilla-S @@link

Network

ProgramVersionOfficial WebsiteGet LatestIssueFuzzing ArgumentsCVE link
tcpdump4.8.1 + libpcap 1.8.1https://www.tcpdump.org/https://github.com/the-tcpdump-group/tcpdumpgithub-e -vv -nr @@link