Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 13 Jul 2015 11:31:08 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: Re: more robustness

Hi Alexander Cherepanov,

> After these commits, your fuzzer just calls ldr_load_pw_line() and all
> details of calling valid(), split() etc. are hidden inside it, right?

Yes. And also a little changes in loader.c

> Then it's possible to simplify the fuzzer a bit. It has an inverted
> structure right now with functions for specific fuzzing methods
> generating only one case at a time, written without loops and forced
> to store their state in static variables. It seems easier to make them
> generate all cases during one call, have loops inside of them and call
> ldr_load_pw_line() in the deepest loops.

Sorry. Generate all cases maybe impossible. I did this before, and it
failed since some formats have long hash. Those formats will generate
many fuzzed hashes and they need large memory. So I changed to
generate one fuzzed hash one time and put it to ldr_load_pw_line().

Thanks,

kai

Content of type "text/html" skipped

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ