Merging odk changes from http://go/wvgerrit/98084 Copy submitted changes for oemcrypto/odk/test/fuzzing from cdm repository to android so that fuzzer scripts in odk can be run using go/android-fuzzing Google3 CLs: http://cl/301943247 http://cl/304011238 http://cl/307142293 http://cl/307087692 Bug: 150900870 Test: The fuzzer scripts can be built once the code is moved to android tree. Odk fuzzer scripts have been verified and successfully running in google3 Change-Id: I92b8a357c32b145c7f80bdc93d05214862368957
20 lines
708 B
Markdown
20 lines
708 B
Markdown
# ODK Fuzzing
|
|
|
|
## Objective
|
|
|
|
* Run fuzzing on ODK and KDO serialize and deserialize APIs using google
|
|
supported fuzzer engines to find security vulnerabilities. Any issues found
|
|
by clusterfuzz will be reported to
|
|
[odk fuzz buganizer](https://b.corp.google.com/issues?q=componentid:425099%20status:open%20reporter:cluster-fuzz-googleplex@google.com).
|
|
|
|
## Run fuzz target on local machine
|
|
|
|
* In order to run fuzz target locally and see code coverage, save binary input
|
|
to be tested against fuzz target into a temporary corpus directory and
|
|
execute following commands
|
|
|
|
```shell
|
|
$ blaze build --config=asan-fuzzer //your:target
|
|
$ blaze-bin/your/target FULL_CORPUS_DIR
|
|
```
|