D2T2 - A New Fuzzing Method for Android
summary
A new Android fuzzer generates combinations of function points (read/write/open/etc.) and repeatedly invokes targeted functions to force quantitative change to qualitative change, using a model‑checking style exploration limited to core call sequences. Built fuzzer runs 1–10 combinations per target, finds issues like IMEI overwrite, permanent storage corruption, remote code execution and DoS, and reports ~50+ bugs including about twenty 0‑days on Smartisan and other OEM devices; some bugs are responsibly withheld.
AI-written summary · about
chapters (6)
- 0:00Introduction and motivation
- 1:23Limitations of traditional fuzzing
- 5:32Quantitative change to quality change
- 10:13D2T2 approach explained
- 15:37Results and vulnerabilities found
- 17:15Q&A session
related talks
45mFuzzing Android: A Recipe For Uncovering Vulnerabilities Inside System Components In Android
53mDIFUZE: Android Kernel Driver Fuzzing
13mFully Automated Functional Fuzzing of Android Apps for Detecting Non-Crashing Logic Bugs
11mIDFuzz: Intelligent Directed Grey-box Fuzzing
31m“Fuzz or lose..."
39mFuzzing GPRS Layer-2 For Fun And Profit
01h 15mMake your programs more reliable with Fuzzing
20mKFuzzTest: Targeted Fuzzing of Internal Kernel Functions