README
¶
ClusterFuzz
ClusterFuzz is a scalable fuzzing infrastructure which finds security and stability issues in software.
It is used by Google for fuzzing the Chrome Browser, and serves as the fuzzing backend for OSS-Fuzz.
ClusterFuzz provides many features which help seamlessly integrate fuzzing into a software project's development process:
- Highly scalable. Google's internal instance runs on over 25,000 machines.
- Accurate deduplication of crashes.
- Fully automatic bug filing and closing for issue trackers (Monorail only for now).
- Testcase minimization.
- Regression finding through bisection.
- Statistics for analyzing fuzzer performance, and crash rates.
- Easy to use web interface for management and viewing crashes.
- Support for coverage guided fuzzing (e.g. libFuzzer and AFL) and blackbox fuzzing.
Overview
Documentation
You can find detailed documentation here.
Trophies
As of January 2019, ClusterFuzz has found ~16,000 bugs in Chrome and ~11,000 bugs in over 160 open source projects integrated with OSS-Fuzz.
Getting Help
You can file an issue to ask questions, request features, or ask for help.
Staying Up to Date
We will use clusterfuzz-announce(#)googlegroups.com to make announcements about ClusterFuzz.
Directories
¶
| Path | Synopsis |
|---|---|
|
src
|
|
|
go/base/buckets
Package buckets provides interfaces for interacting with cloud buckets.
|
Package buckets provides interfaces for interacting with cloud buckets. |
|
go/base/environ
Package environ implements helpers for extracting and setting environment variables.
|
Package environ implements helpers for extracting and setting environment variables. |
|
go/base/fs
Package fs implements various helpers for dealing with the filesystem.
|
Package fs implements various helpers for dealing with the filesystem. |
|
go/base/logs
Package logs implements logging helpers.
|
Package logs implements logging helpers. |
|
go/base/persist
Package persist implements a persistent cache.
|
Package persist implements a persistent cache. |
|
go/base/process
Package process implements process handling functionality.
|
Package process implements process handling functionality. |
|
go/bots
Package bots implements base functionality used by bots.
|
Package bots implements base functionality used by bots. |
|
go/bots/heartbeat
command
|
|
|
go/cloud
Package cloud implements common google cloud utilities.
|
Package cloud implements common google cloud utilities. |
|
go/cloud/db
Package db implements various helpers for accessing Cloud Datastore.
|
Package db implements various helpers for accessing Cloud Datastore. |
|
go/cloud/db/types
Package types contains Datastore types (auto-generated from src/python/datastore/data_types.py).
|
Package types contains Datastore types (auto-generated from src/python/datastore/data_types.py). |
|
go/cloud/gcs
Package gcs implements a buckets.Provider for Google Cloud Storage.
|
Package gcs implements a buckets.Provider for Google Cloud Storage. |
|
go/cloud/stackdriver
Package stackdriver implements logging using Stackdriver.
|
Package stackdriver implements logging using Stackdriver. |
|
go/fuzzers
Package fuzzers implements builtin fuzzers and related helpers.
|
Package fuzzers implements builtin fuzzers and related helpers. |
|
go/server
command
|
|
|
go/server/cron
Package cron implements handlers for cron jobs.
|
Package cron implements handlers for cron jobs. |
|
go/testing/config
Package config implements configuration helpers for tests.
|
Package config implements configuration helpers for tests. |
|
go/testing/emulators
Package emulators provides utilities for starting Google Cloud emulators.
|
Package emulators provides utilities for starting Google Cloud emulators. |
|
go/testing/gcs
command
Implementation of a GCS server which only accepts PUT uploads and URL downloads.
|
Implementation of a GCS server which only accepts PUT uploads and URL downloads. |
|
go/testing/metadata
command
GCE Metadata server
|
GCE Metadata server |
|
go/toy
command
Simple toy example to iterate through all open testcases.
|
Simple toy example to iterate through all open testcases. |
|
go/untrusted_runner
command
Untrusted worker process.
|
Untrusted worker process. |
Click to show internal directories.
Click to hide internal directories.