danobi / btrfs-fuzz

Unsupervised coverage-guided btrfs fuzzer

btrfs-fuzz

btrfs-fuzz is an unsupervised coverage guided-fuzzer tailored for btrfs.

Dependencies

btrfs-fuzz is mostly self-contained inside a docker image. The only things you need on your host are:

• btrfs-progs
• podman
• python3
• QEMU
• Rust toolchain

Quickstart

$ git clone https://github.com/danobi/btrfs-fuzz.git
$ cd btrfs-fuzz
$ ./x.py build
$ ./x.py seed
$ ./x.py run

x.py

x.py is the "Makefile" for this project. See x.py --help for full options.

Trophies

• Kernel divide-by-zero
• Kernel stack scribbling