Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking the Solidity Compiler with a Fuzzer

blog.trailofbits.com | blog | #web3 | #vulnerability-research | #fuzzing | #bug-hunting | #blockchain | #compiler | #solidity | #compilers | #afl | #solc

Summary

A fuzzing campaign against the Solidity compiler solc surfaced nearly 20 new bugs, mostly unreported; the recipe combined source-code-style AFL mutations, corpus curation, and patience.
Published
Collected

original ↗

Related coverage

  1. How to hack VeChainThor? (hackenproof.com)
  2. State divergence enables unauthorized access (blog.trailofbits.com)
  3. The future of Clang-based tooling (blog.trailofbits.com)
  4. A Year in the Life of a Compiler Fuzzing Campaign (blog.trailofbits.com)
  5. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry (hackenproof.com)
  6. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry (hackenproof.com)

back