Integrated fuzzing

摘要

Integrated fuzzing techniques are described. A fuzzing system may employ a container configured as a separate component that can host different target pages to implement fuzzing for an application. A hosted target file is loaded as a subcomponent of the container and parsed to recognize functionality of the application invoked by the file. In at least some embodiments, this involves building a document object model (DOM) for a browser page and determining DOM interfaces of a browser to call based on the page DOM. The container then operates to systematically invoke the recognized functionality to cause and detect failures. Additionally, the container may operate to perform iterative fuzzing with multiple test files in an automation mode. Log files may be created to describe the testing and enable both self-contained replaying of failures and coverage analysis for multiple test runs.

主权项

1. A computing device comprising:
a processing system; and one or more modules operable via the processing system to implement a fuzzing system configured to perform operations to test a content rendering application including:
obtaining a target file configured to facilitate fuzzing of the content rendering application in which functionality of the application is tested by simulating inputs to cause failures of the application;loading the target file as a subcomponent of a container configured to implement the fuzzing for the content rendering application;building a content representation for elements of the target file to enumerate functionality of the application invoked by the target file; andinvoking the enumerated functionality to detect failures associated with processing of the target file by the application.