google/oss-fuzz
Oss Fuzz
OSS-Fuzz is a distributed, containerized platform for continuous fuzzing and memory safety analysis. It functions as a bug hunting infrastructure that identifies security vulnerabilities and stability bugs through automated, coverage-guided fuzz testing across a scalable cluster of containers.
The system provides a continuous security testing pipeline that manages the entire lifecycle of vulnerability discovery, from bootstrapping project templates and compiling targets to executing long-running batch tests. It specifically focuses on memory safety, utilizing sanitizers to detect buffer overflows and undefined behavior in compiled code.
The platform includes capabilities for crash reproduction, automated test case export, and code coverage analysis to identify untested areas of a codebase. It also supports pull request fuzzing to identify regressions and incorporates security governance through two-party review enforcement.
The project supports multiple programming languages and provides automation utilities for project configuration and build pipeline management.
Features
- Fuzzing Orchestrators - Orchestrates the bootstrapping and execution of fuzzing targets within isolated container environments.
- Fuzz Testing Tools - Enables running fuzzing engines across distributed environments to uncover security vulnerabilities.
- Fuzzing And Analysis - Provides a distributed platform for automated vulnerability discovery using coverage-guided fuzz testing.
- Containerized Fuzzing - Executes fuzz targets inside containers to isolate the environment while identifying security vulnerabilities.
- Fuzzing - Runs automated tests that provide random inputs to software to find security vulnerabilities and stability bugs.
- Continuous - Combines modern fuzzing techniques with scalable distributed execution for continuous bug discovery.
- Fuzzing Target Isolation - Runs fuzzing targets within isolated containers to ensure consistent build and execution environments across distributed infrastructure.
- Distributed Testing Grids - Scales the execution of fuzzing targets across a cluster of containers to increase bug discovery probability.
- Security Testing Pipelines - Implements a continuous integration pipeline that automatically builds targets and identifies regressions in pull requests.
- Distributed Execution Runtimes - Distributes long-running fuzzing jobs across a scalable cluster to maximize test case throughput.
- Memory Safety Diagnostics - Utilizes a suite of sanitizers and fuzzing engines to detect memory corruption and undefined behavior in compiled code.
- Undefined Behavior Detection - Uses specialized sanitizers and coverage-guided engines to detect undefined behavior and memory safety issues.
- Open Source Security - Identifies memory leaks and buffer overflows in public codebases using distributed fuzzing engines.
- Vulnerability Assessment and Testing - Identifies programming errors and buffer overflows using guided in-process fuzz testing.
- Sanitizer Integrations - Combines instrumented binaries with memory sanitizers to detect undefined behavior and heap overflows.
- Code Coverage Analysis - Uses runtime code coverage data to mutate inputs and explore new execution paths within the target software.
- Corpus Evolution Strategies - Maintains a persistent set of interesting inputs that are continuously evolved to find deeper security vulnerabilities.
- General Bug Detection - Finds deep-seated programming errors and crashes through long-running batch tests and coverage-guided execution.
- Build and Test Scripts - Automates project construction and the execution of fuzzing targets through a centralized script.
- Pull Request Validation Gates - Acts as a quality gate by running automated fuzz tests on pull requests before code is merged.
- Containerized Build Pipelines - Compiles targets and manages the build pipeline within containerized environments for consistent execution.
- Fuzz Target Compilation - Compiles projects within the execution environment to prepare them for automated fuzz testing.
- Security Vulnerability Reporting - Provides tools for reproducing and investigating security vulnerabilities through crash analysis and code coverage.
- Crash Reporting - Provides services for capturing and exporting crashing inputs as reproducible test cases for offline analysis.
- Crash Reproduction - Executes specific test cases within controlled environments to verify and analyze identified crashes.
- Crash Testcase Export - Downloads the specific inputs that triggered a crash to facilitate faster bug reproduction and fixing.
- Automated Regression Verification - Allows modifying project code and verifying changes against a service to identify regressions.
- Code Coverage Reportings - Generates detailed code coverage reports from fuzzing targets to pinpoint unexplored execution paths.
- Dynamic Analysis - Continuous fuzzing for open source software.
- Testing Tools - Continuous fuzzing service for open source software.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
