Power Management and USB...
summary
A modular fuzzing pipeline combines LibAFL, S2E basic‑block coverage, and an SSH-driven input processor to fuzz kernel power‑management races during suspend; coverage survives crashes by extracting basic‑block maps from the VM and from FTrace on real hardware. An external ROCKPI 4B running a modified raw‑gadget keyboard supplies persistent USB keypresses and remote‑wakeup attempts; QEMU lacks wakeup emulation so physical BeagleBone/ROCKPI testing reproduces a DSTS link bug and finds keyboard lockup issues. S2E + LibAFL pipeline ROCKPI 4B raw-gadget keyboard
AI-written summary · about
chapters (13)
- 0:00Introduction and motivation
- 1:03Power management challenges
- 4:10Real-world USB power bugs
- 7:23Hardware for remote wakeup
- 9:09Fuzzer architecture with libAFL
- 11:57Limitations of virtual machines
- 13:45Switching to physical hardware
- 16:16Tracking low-power coverage
- 18:21Physical architecture demo
- 20:49Live demo of physical setup
- 23:16Initial fuzzing results
- 24:21Conclusions and future work
- 27:49Acknowledgments and Q&A
related talks
27mCracking With Automated USB Fuzz
28mkAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
46mBypass Kernel Barriers: Fuzzing Linux Kernel in Userspace With LKL
25mDon't Trust Your USB! How to Find Bugs in USB Device Drivers
39mEL3XIR: Fuzzing COTS Secure Monitors
29mVirtual Device Fuzzing Support in QEMU
24mDesigning UAPI for Fuzz-ability
26mFuzzing Host-to Guest Attack Surface in Android Protected KVM