Sat.Nov 26, 2022 - Fri.Dec 02, 2022

Remove undefined
article thumbnail

How Mayhem Helped Uncover a Security Vulnerability in RustOS (CVE-2022-36086)

ForAllSecure

I also ran each file in the corpus through MIRI to detect undefined behavior. These served as fine-grained checks for specific edge-cases I was aware of. After fuzzing for dozens of CPU hours without finding new coverage, I had fairly high confidence in the patch. How Mayhem Keeps You Safe.