[webkit-dev] Fuzzinator, a mutation based web fuzzer
hodovan at inf.u-szeged.hu
Tue Jun 25 01:56:42 PDT 2013
as many of you know already I'm working on an universal web fuzzer,
which is able to generate random test cases for both svg, html, css and
js, and test them against any browser. With this method we can catch
crashes, assertions, memory corruptions and all the funny things.
A few words about it: Fuzzinator learns from existing test cases and
based on this information it generates new tests that are syntactically
correct. Beside this randomized step I also put some language specific
knowledge into the tests too. Further details about the theoretical
background will be shared in a blogpost soon.
However the results are available in public already and they are
collected under a metabug in bugzilla:
https://bugs.webkit.org/show_bug.cgi?id=116980. So should any of you
feel like browsing or fixing them, don't hesitate to start with it ;)
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the webkit-dev