Introducing a new section on snapshot fuzzing for kernel-level testing in the Testing Handbook

Summary: Trail of Bits added a Snapshot Fuzzing section to the fuzzing chapter of its Testing Handbook, aimed at testing kernels, secure monitors, and other targets that require non-trivial setup. The technique captures memory and register state at a specific execution point so the fuzzer can repeatedly restore and test from that exact state, and the chapter demonstrates it using the open-source fuzzer wtf.
Key Takeaway: Kernel-mode components, antivirus software among them, run at the most privileged level of the operating system, where a single crash can bring down the entire system and memory corruption bugs carry severe consequences when exploited - yet the source notes that libFuzzer and AFL can test only extracted functions and miss system-wide interactions.

Read the original at Trail of Bits Blog ↗