一句话:提出 GrayC,用灰盒模糊测试提升对 C 编译器和代码分析器的缺陷发现能力。
编译器与代码分析器的模糊测试已在 LLVM、GCC、Frama-C 等框架中发现并修复大量缺陷。然而,现有方法大多采用黑盒策略;随着这些工具不断成熟,它们对传统黑盒 fuzzer 逐渐产生免疫,继续发现新缺陷变得困难。本文提出 GrayC,面向 C 编译器和分析器采用灰盒模糊测试,利用被测程序内部反馈信息指导测试输入生成与变异,以突破黑盒 fuzzing 的局限。摘要未报告具体实验数字,但论文的核心贡献在于将灰盒 fuzzing 引入 C 编译器与分析器测试场景,旨在提升缺陷发现效率。
Fuzzing of compilers and code analysers has led to a large number of bugs being found and fixed in widely-used frameworks such as LLVM, GCC and Frama-C. Most such fuzzing techniques have taken a blackbox approach, with compilers and code analysers starting to become relatively immune to such fuzzers.