Re: Checking PCP archives - RFC

[fche@xxxxxxxxxx (Frank Ch. Eigler)]

Ken McDonell <kenj@xxxxxxxxxxxxxxxx> writes:

> [...]
>> (Yes, fuzzing can include structured data, by teaching it the grammar of
>> PCP archives but then messing with the productions randomly.)
>
> Frank do you have a pointer to an available toolkit that would be
> suitable for this sort of effort?  I've read about, but never used
> fuzzers.  

Yeah, I'm in the same boat.  One might reinvent the wheel by
hand-coded error-generators like mkbadlen, we could investigate tools
like http://peachfuzzer.com/, wherein an XMLy model is made of the
data format, then the tool generates a gajillion slightly-wrong ones.
The fact that PCP archives span more than one file may pose a problem.
OTOH, the same toolset can also be configured to do fuzzing of the
wire protocol (!).


- FChE