[webkit-dev] JavaScript fuzzer for security testing

Maciej Stachowiak mjs at apple.com
Sat Aug 4 18:41:37 PDT 2007


On Aug 4, 2007, at 6:26 PM, Boyd Waters wrote:

> Everyone saw the post about the JavaScript fuzzing tool released by  
> Mozilla developers this week:
>
> http://blog.mozilla.com/security/2007/08/02/javascript-fuzzer-available/
> http://www.squarefree.com/2007/08/02/introducing-jsfunfuzz/
> http://www.squarefree.com/2007/08/02/fuzzing-for-correctness/
>
> Has anyone pointed this tool at WebKit?

Yes. It found some minor bugs in the past, but no crashes or potential  
security issues. We've got some bugs in bugzilla on it and we're  
continuing to run the tool.

Regards,
Maciej




More information about the webkit-dev mailing list