Running libFuzzer in a browser, via WASM. We need to go deeper (?)https://github.com/jonathanmetzman/wasm-fuzzing-demo/blob/master/meetup-Fuzzing-Native-Applications-in-Browsers-With-WASM.pdf …
This is pretty cool and leaves an additional thought: Could the wasm vm be used to add instrumentation to a precompiled wasm bytecode thingy? 
-
-
I’m pretty sure the answer is yes for most modern JS engines, just need to add instrumentation to the bytecode before JIT
-
I'll see if a student wants to throw a PoC together.
- Još 2 druga odgovora
Novi razgovor -
-
-
IMO yes, a problem that arises is how to detect classes of bugs that normally cause crashes on regular CPUs without ASan. Last time I looked at WASM, there wasn't memory protection (I was able to overwrite a const string to gain xss from uaf, csaw 18 iirc).
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.