antojoseph / droid-ff Goto Github PK

when i finish fuzz,there has 10 tombstones about /system/xbin/dexdump for signal 11.
dexdump has something wrong?
--------- beginning of crash
06-07 09:22:22.100 25787 25787 F libc : Fatal signal 11 (SIGSEGV), code 1, fault addr 0xf6dc0000 in tid 25787 (dexdump)
06-07 09:22:22.203 518 518 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
06-07 09:22:22.203 518 518 F DEBUG : Build fingerprint: 'unknown'
06-07 09:22:22.203 518 518 F DEBUG : Revision: '0'
06-07 09:22:22.203 518 518 F DEBUG : ABI: 'arm'
06-07 09:22:22.203 518 518 F DEBUG : pid: 25787, tid: 25787, name: dexdump >>> /system/xbin/dexdump <<<
06-07 09:22:22.204 518 518 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xf6dc0000
--------- beginning of system
06-07 09:22:22.204 977 1312 W NativeCrashListener: Couldn't find ProcessRecord for pid 25787
06-07 09:22:22.206 518 518 F DEBUG : r0 00004578 r1 f6dbff6c r2 ffef7ae4 r3 00004578
06-07 09:22:22.206 518 518 E DEBUG : AM write failed: Broken pipe
06-07 09:22:22.206 518 518 F DEBUG : r4 00045780 r5 f6dc001c r6 0027b8fe r7 f6dc152c
06-07 09:22:22.206 518 518 F DEBUG : r8 80078071 r9 000015af sl 00000000 fp 00000000
06-07 09:22:22.206 518 518 F DEBUG : ip 00000000 sp ff9ec9bc lr 00000000 pc f7020008 cpsr 20070010
06-07 09:22:22.214 518 518 F DEBUG :
06-07 09:22:22.214 518 518 F DEBUG : backtrace:
06-07 09:22:22.214 518 518 F DEBUG : #00 pc 00002008 /system/lib/libz.so (adler32+488)
06-07 09:22:22.215 518 518 F DEBUG : #1 pc 00007001 /system/xbin/dexdump
06-07 09:22:22.215 518 518 F DEBUG : #2 pc 00004081 /system/xbin/dexdump
06-07 09:22:22.215 518 518 F DEBUG : #3 pc 00003cf9 /system/xbin/dexdump
06-07 09:22:22.215 518 518 F DEBUG : #4 pc 00001ce3 /system/xbin/dexdump
06-07 09:22:22.215 518 518 F DEBUG : #5 pc 0001705d /system/lib/libc.so (__libc_init+44)
06-07 09:22:22.215 518 518 F DEBUG : #6 pc 00001dac /system/xbin/dexdump
06-07 09:22:22.217 529 2766 E DMD : [M/listen_server] dsm_selinux has error (20901) reported
06-07 09:22:22.217 529 2766 E DMD : [M/listen_server] action-0, cname-dsm_selinux, info-0
06-07 09:22:22.217 529 2766 E DMD : [M/dsm_dump_error] dsm_selinux finish dump 226 bytes

Hi,

whats the target of the fuzzing in this fuzzing framework? whats the purpose of it?

when i run droif-ff,something wrong with it，how can i fix it?
(0) Generate Files
(1) Start running fuzzer
(2) View Crashes
(3) Triage Crashes
(4) View Source of Crashes
(5) Exploitability Test
Please enter your selection : 1
Your Option is : (1) Start running fuzzer

*** Executing adb shell logcat -c command
Traceback (most recent call last):
File "droid-ff.py", line 52, in
show_options()
File "droid-ff.py", line 35, in show_options
run_campaign.start()
File "/root/droid-ff/run_campaign.py", line 12, in start
clear_logcat()
File "/root/droid-ff/run_campaign.py", line 16, in clear_logcat
adb_android.shell("logcat -c")
File "build/bdist.linux-x86_64/egg/adb_android/adb_android.py", line 46, in shell
File "build/bdist.linux-x86_64/egg/adb_android/adb_android.py", line 142, in _exec_command
File "/usr/lib/python2.7/subprocess.py", line 566, in check_output
process = Popen(stdout=PIPE, _popenargs, *_kwargs)
File "/usr/lib/python2.7/subprocess.py", line 710, in init
errread, errwrite)
File "/usr/lib/python2.7/subprocess.py", line 1335, in _execute_child
raise child_exception
OSError: [Errno 2] No such file or directory

Here on line number 7, we are calling radamsa in a loop, which isn't required.

radamsa provides an -n option on its own, which would remove the overhead of calling it lets say 100k times. Submitting a pull request for the same.

Dear antojoseph,

I'm trying to use your DroidFF tool but it does not work on my computer.

Problem occurred after I select number of Samples to be Generated. You can see below images for more detail:
With Bit flipper selection:
https://drive.google.com/file/d/0B7uHDzWwW2yLaVBFa2RDeG5lQTY2dHlHWHA3cnJpSThIUXVv/view?usp=sharing
With Radamsa:
https://drive.google.com/file/d/0B7uHDzWwW2yLUnQwVnRPOXZUMEJzMUx6aWZPRjV3cGh0U3NN/view?usp=sharing
With Peach:
https://drive.google.com/file/d/0B7uHDzWwW2yLUlBva25xVkFkUG15MG8yQk1jdUlLY1ZYOVRZ/view?usp=sharing
Please help me to figure out what problem is.

Look forward to your reply soon ^ ^
Thank you so much!

For the pyZUFF installation line I get this error:
Could not find a version that satisfies the requirement pyZZUF (from versions: ) No matching distribution found for pyZZUF