ODK Fuzzing
Objective
- Run fuzzing on ODK and KDO serialize and deserialize APIs using google supported fuzzer engines to find security vulnerabilities. Any issues found by clusterfuzz will be reported to odk fuzz buganizer.
Run fuzz target on local machine
-
In order to run fuzz target locally and see code coverage, save binary input to be tested against fuzz target into a temporary corpus directory and execute following commands
$ blaze build --config=asan-fuzzer //your:target $ blaze-bin/your/target FULL_CORPUS_DIR