Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fuzzing on PyLoxone at Uni-Ulm #292

Open
wants to merge 266 commits into
base: master
Choose a base branch
from
Open

Conversation

ThorbenCarl
Copy link

Hi everyone,
hi @JoDehli,

we are 5 students from the University of Ulm and we had to fuzz some project for our lecture "Software Security Testing".

You can do whatever you want with our work. For us it was more about the lecture, trying things out and getting a grade bonus ;-)

We found two little things in helpers.py that we don't want to withhold from you:

  • map_range():
    • A possible 0 division is not checked or intercepted.
    • If in_max and in_min are equal.
  • get_all():
    • If the key controls or type is not in the json_data: dict the function crashes.

Chears

Hit me up for the non-existent documentation... ;-)

ThorbenCarl and others added 30 commits May 22, 2024 08:43
…_fuzzer

Add Value Pools and Value Pool Fuzzer
Add value pools to the fuzzing project.
update readme
- Implemented limit_param_set method which reduces the number of
  elements in a param_set to a specified number
- Tested function by implementing the method into the test function
  "test_map_range()"
- Implemented limit_param_set method which reduces the number of
  elements in a param_set to a specified number
- Tested function by implementing the method into the test function
  "test_map_range()"
- Implemented limit_param_set method which reduces the number of elements in a param_set to a specified number
- Tested function by implementing the method into the test function "test_map_range()"
David Sievers and others added 30 commits July 2, 2024 19:53
- Deleted mutator and shiftet mutation method to GreyBoxRunner ->
  Mutator class unnecessary with one method in it
- Adjusted uml diagram
- Deleted unnecessary functionality
Found test on PyLoxone for generators which runs (but is trivial)
Update fork from master project
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants