littledivy / dfuzz

libFuzzer based JS/TS fuzzer.

dfuzz

Fuzzing JS/TS code with LLVM libFuzzer.

Installation

deno install -Afn --unstable dfuzz https://deno.land/x/fuzz/fuzzer.ts

Usage

export function fuzzTarget(input: Uint8Array): void {
  // ...
}

dfuzz fuzz_target.ts

Trophy case

List of bugs found with dfuzz.

• Did dfuzz help you find a bug? Please add it to the list.

License

All files in libfuzzer directory are licensed NCSA. All other files are licensed under MIT license.

dfuzz's Issues

compiling on linux fails

It fails with

clang++ -std=c++17 -w -fno-omit-frame-pointer -fsanitize=fuzzer-no-link -fno-sanitize=undefined -DCOMPILER_RT_SANITIZERS_TO_BUILD="" -g -O3 -shared -fPIC  libfuzzer/FuzzerCrossOver.cpp libfuzzer/FuzzerDataFlowTrace.cpp libfuzzer/FuzzerDriver.cpp libfuzzer/FuzzerExtFunctionsDlsym.cpp libfuzzer/FuzzerExtFunctionsWeak.cpp libfuzzer/FuzzerExtFunctionsWindows.cpp libfuzzer/FuzzerExtraCounters.cpp libfuzzer/FuzzerExtraCountersDarwin.cpp libfuzzer/FuzzerExtraCountersWindows.cpp libfuzzer/FuzzerFork.cpp libfuzzer/FuzzerInterceptors.cpp libfuzzer/FuzzerIO.cpp libfuzzer/FuzzerIOPosix.cpp libfuzzer/FuzzerIOWindows.cpp libfuzzer/FuzzerLoop.cpp libfuzzer/FuzzerMerge.cpp libfuzzer/FuzzerMutate.cpp libfuzzer/FuzzerSHA1.cpp libfuzzer/FuzzerTracePC.cpp libfuzzer/FuzzerUtil.cpp libfuzzer/FuzzerUtilDarwin.cpp libfuzzer/FuzzerUtilFuchsia.cpp libfuzzer/FuzzerUtilLinux.cpp libfuzzer/FuzzerUtilPosix.cpp libfuzzer/FuzzerUtilWindows.cpp fuzzer.cc -o libfuzzer.so
aa/usr/bin/ld: /tmp/FuzzerInterceptors-0b9bcb.o: .preinit_array section is not allowed in DSO
/usr/bin/ld: failed to set dynamic section sizes: nonrepresentable section on output
clang-16: error: linker command failed with exit code 1 (use -v to see invocation)
make: *** [Makefile:15: build] Error 1

clang --version
clang version 16.0.6 (Fedora 16.0.6-3.fc38)
Target: x86_64-redhat-linux-gnu
Thread model: posix
InstalledDir: /usr/bin

Support different architectures

Currently there is only one hard-coded artifact (macos?), it would be great if this module gets updated to use plug and provide artifact for other os/archs.