favocado / webkitgtk-fuzz

an example for using context-dependent mode.

Fuzzing WebkitGTK++ with Favocado

This is an example how to to setup and fuzz webkitgtk++ by favocado in context-dependent mode.

Config

To do context-dependent fuzzing on webkitgtk, we need to setup a Logger, In this repo we used window.confirm as a Logger.

We patched this window.confirm to write out the fuzzing code which is generated when fuzzing in context-dependent mode.

Install

0. install docker
1. adjust your webkitgtk version in build.sh
2. run ./build.sh