[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Reporting 1.2K crashes



Hi,

On 27/06/13 at 12:34 +0200, Wouter Verhelst wrote:
> On 25-06-13 07:28, Alexandre Rebert wrote:
> > Hi,
> > 
> > I am a security researcher at Carnegie Mellon University, and my team
> > has found thousands of crashes in binaries downloaded from debian
> > wheeze packages.
> 
> Out of interest, can you elaborate on the methodology you used in trying
> to find these crashes? I can't imagine you manually ran thousands of
> programs, watching the screen intently, so there must have been some
> other way...

The original mail said:
> We found the bugs using Mayhem [1], an automatic bug finding system
> that we've been developing in David Brumley's research lab for a
> couple of years.

[...]

> [1] http://users.ece.cmu.edu/~arebert/papers/mayhem-oakland-12.pdf

Lucas


Reply to: