OSS-Fuzz - Google's continuous fuzzing service for open source software
summary
Service launched Dec 2016 and runs coverage‑guided fuzzers on Google VMs, using libFuzzer, AFL and sanitizers like address sanitizer to automatically fuzz targets, minimize reproducers and file private bug reports. It integrates with project repos, scales across a cluster, and reports thousands of crashes — transcript cites over 2,000 bugs across 60+ projects including heap/stack overflows, UB and timeouts. Demo shows Heartbleed reproduced in seconds; Google also offers monetary rewards for integrations.
AI-written summary · about
chapters (27)
- 0:00Intro
- 0:49What is fuzz
- 1:20Coverage guided fuzzing
- 3:08Heartbleed
- 5:05Why Heartbleed
- 5:50Why OSSFuzz
- 6:29Our first service
- 6:59OSSFuzz
- 8:36Simple example
- 11:16First target
- 12:17Demo
- 12:40Heartbleed demo
- 13:48Running Heartbleed
- 18:12Seed Corpus
- 19:01Readwrite
- 20:04Logs
- 22:16LibXML
- 24:42Bugs
- 26:23Top 30
- 27:53Wireshark
- 29:33Ideal integration
- 31:22Life of a bug
- 33:11Bug Report
- 35:59Rewards
- 36:56Testdriven development
- 38:14Wrapup
- 39:08Questions
related talks
01h 00mClusterFuzz: Fuzzing at Google Scale
01h 39mFuzzing in the open: Integrate your project in OSS-Fuzz for continuous fuzzing
31m“Fuzz or lose..."
39mFuzzing Session: Finding Bugs and Vulnerabilities Automatically
01h 15mMake your programs more reliable with Fuzzing
39mMaking Fuzzing Part of Your Software Development Lifecycle
53mFuzzing 101
25mHow fuzzing helps to find bugs