News: 0000829634

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Fuzzing the Linux kernel (x86) entry code (Oracle)

([Kernel] Aug 26, 2020 19:35 UTC (Wed) (corbet))


The Oracle blog is putting up a series by Vegard Nossum on fuzzing the kernel's entry code; [1]part 1 and [2]part 2 are available now. " While these fuzzers effectively test the system calls themselves (and the code reachable through system calls), one thing they don't test very well is what happens at the actual transition point between userspace and the kernel. There is more to this boundary than meets the eye; it is written in assembly code and there is a lot of architectural state (CPU state) that must be verified or sanitized before the kernel can safely start executing its C code. This blog post explores how one might go about writing a fuzzer targeting the Linux kernel entry code on x86. "



[1] https://blogs.oracle.com/linux/fuzzing-the-linux-kernel-x86-entry-code%2c-part-1-of-3

[2] https://blogs.oracle.com/linux/fuzzing-the-linux-kernel-x86-entry-code%2c-part-2-of-3

Animals can be driven crazy by putting too many in too small a pen.
Homo sapiens is the only animal that voluntarily does this to himself.
-- Lazarus Long