Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

parallel-fuzzing unlikely reports crashes #142

Open
kateinoigakukun opened this issue Oct 26, 2024 · 0 comments
Open

parallel-fuzzing unlikely reports crashes #142

kateinoigakukun opened this issue Oct 26, 2024 · 0 comments

Comments

@kateinoigakukun
Copy link

kateinoigakukun commented Oct 26, 2024

When parallel-fuzzing is enabled, libFuzzer tries to find multiple crashes.

For instance:

  1. On a recent GitHub Actions Ubuntu instance with 4 cores, cifuzz passes -jobs=4 to libFuzzer.
  2. libFuzzer limits the number of active workers to half the available cores, resulting in 2 workers.

In this configuration, libFuzzer often times out even if it successfully detects crashes, as it does not timeout only when both workers identify at least one crash. However, cifuzz does not report crashes if the libFuzzer driver times out, even when crashes are detected. This behavior can be observed in the cifuzz implementation: source code.

Consequently, when parallel fuzzing is enabled, cifuzz rarely reports crashes under these conditions.

Example of a live case where crashes were detected but not reported:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant