{"id":102283,"date":"2021-11-14T15:36:53","date_gmt":"2021-11-14T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite"},"modified":"2021-11-14T15:36:53","modified_gmt":"2021-11-14T13:36:53","slug":"google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","title":{"rendered":"A Google bemutatta a ClusterFuzzLite fuzzing-tesztel\u00e9si rendszert.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Google bemutatta a ClusterFuzzLite projektet, amely lehet\u0151v\u00e9 teszi a k\u00f3d fuzzing tesztel\u00e9s\u00e9nek megszervez\u00e9s\u00e9t a potenci\u00e1lis sebezhet\u0151s\u00e9gek korai \u00e9szlel\u00e9se \u00e9rdek\u00e9ben a folyamatos integr\u00e1ci\u00f3s rendszerek m\u0171k\u00f6d\u00e9se sor\u00e1n. Jelenleg a ClusterFuzz automatikus fuzzing tesztel\u00e9st v\u00e9gez a GitHub Actions, a Google Cloud Build \u00e9s a Prow pull-k\u00e9relmein, de a j\u00f6v\u0151ben v\u00e1rhat\u00f3 a t\u00e1mogat\u00e1s m\u00e1s CI-rendszerek sz\u00e1m\u00e1ra is. A projekt a ClusterFuzz platformon alapul, amelyet a fuzzing tesztel\u00e9si klaszterek munk\u00e1j\u00e1nak koordin\u00e1l\u00e1s\u00e1ra hoztak l\u00e9tre, \u00e9s az Apache 2.0 licenc alatt terjesztik. <\/p>\n

Megjegyzend\u0151, hogy a Google 2016-ban bevezetett OSS-Fuzz szolg\u00e1ltat\u00e1sa \u00f3ta a folyamatos fuzzing tesztel\u00e9s keret\u00e9ben t\u00f6bb mint 500 jelent\u0151s ny\u00edlt projektet fogadtak el. A v\u00e9gzett ellen\u0151rz\u00e9sek alapj\u00e1n t\u00f6bb mint 6500 meger\u0151s\u00edtett sebezhet\u0151s\u00e9get \u00e9s t\u00f6bb mint 21 ezer hib\u00e1t jav\u00edtottak ki. A ClusterFuzzLite folytatja a fuzzing tesztel\u00e9si mechanizmusok fejleszt\u00e9s\u00e9t a probl\u00e9m\u00e1k kor\u00e1bbi \u00e9szlel\u00e9s\u00e9nek lehet\u0151s\u00e9g\u00e9vel a javasolt v\u00e1ltoztat\u00e1sok fel\u00fclvizsg\u00e1lati szakasz\u00e1ban. A ClusterFuzzLite m\u00e1r be van \u00e9p\u00edtve a systemd \u00e9s curl projektek v\u00e1ltoz\u00e1sainak fel\u00fclvizsg\u00e1lati folyamataiba, \u00e9s lehet\u0151v\u00e9 tette a statikus elemz\u0151k \u00e9s linterek \u00e1ltal kezdetben figyelmen k\u00edv\u00fcl hagyott hib\u00e1k felt\u00e1r\u00e1s\u00e1t az \u00faj k\u00f3d ellen\u0151rz\u00e9se sor\u00e1n. <\/p>\n

A ClusterFuzzLite t\u00e1mogatja a projekteket C, C++, Java (m\u00e1s JVM-alap\u00fa nyelvek), Go, Python, Rust \u00e9s Swift nyelveken. A fuzzing tesztel\u00e9s a LibFuzzer motor haszn\u00e1lat\u00e1val zajlik. A mem\u00f3ria kezel\u00e9s\u00e9vel kapcsolatos hib\u00e1k \u00e9s anom\u00e1li\u00e1k \u00e9szlel\u00e9s\u00e9re az AddressSanitizer, MemorySanitizer \u00e9s UBSan (UndefinedBehaviorSanitizer) eszk\u00f6z\u00f6k is h\u00edvhat\u00f3k. <\/p>\n

A ClusterFuzzLite f\u0151bb funkci\u00f3i: gyors ellen\u0151rz\u00e9s a javasolt v\u00e1ltoztat\u00e1sok hib\u00e1inak megtal\u00e1l\u00e1s\u00e1ra a k\u00f3d elfogad\u00e1sa el\u0151tt; a hib\u00e1k el\u0151fordul\u00e1si k\u00f6r\u00fclm\u00e9nyeinek jelent\u00e9se; a m\u00e9lyebb hib\u00e1k felt\u00e1r\u00e1s\u00e1ra szolg\u00e1l\u00f3 fejlettebb fuzzing tesztel\u00e9sre val\u00f3 \u00e1tt\u00e9r\u00e9s lehet\u0151s\u00e9ge, amelyek nem bontakoztak ki a k\u00f3dv\u00e1ltoztat\u00e1sok ellen\u0151rz\u00e9se sor\u00e1n; coverage jelent\u00e9sek gener\u00e1l\u00e1sa a tesztel\u00e9s sor\u00e1n a k\u00f3d lefedetts\u00e9g\u00e9nek \u00e9rt\u00e9kel\u00e9s\u00e9re; modul\u00e1ris architekt\u00fara, amely lehet\u0151v\u00e9 teszi a sz\u00fcks\u00e9ges funkcionalit\u00e1s kiv\u00e1laszt\u00e1s\u00e1t. <\/p>\n

Eml\u00e9keztet\u00fcnk, hogy a fuzzing tesztel\u00e9s sor\u00e1n k\u00fcl\u00f6nf\u00e9le v\u00e9letlenszer\u0171 bemeneti adatok kombin\u00e1ci\u00f3it gener\u00e1lj\u00e1k, amelyek k\u00f6zel \u00e1llnak a val\u00f3s adatokhoz (p\u00e9ld\u00e1ul html-oldalak v\u00e9letlenszer\u0171 tagparam\u00e9terekkel, arch\u00edvumok vagy anom\u00e1lis fejl\u00e9c\u0171 k\u00e9pek stb.), \u00e9s r\u00f6gz\u00edtik a feldolgoz\u00e1s sor\u00e1n esetlegesen bek\u00f6vetkez\u0151 hib\u00e1kat. Ha egy adott sorozat \u00f6sszeoml\u00e1st okoz vagy nem felel meg a v\u00e1rt reakci\u00f3nak, akkor ez a viselked\u00e9s nagy val\u00f3sz\u00edn\u0171s\u00e9ggel hib\u00e1ra vagy sebezhet\u0151s\u00e9gre utal.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 ClusterFuzzLite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f ClusterFuzz \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f pull-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 GitHub Actions, \u0432 Google Cloud Build \u0438 \u0432 Prow, \u043d\u043e \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 CI-\u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ClusterFuzz, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102283","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Google bemutatta a ClusterFuzzLite fuzzing tesztel\u00e9si rendszert | ProHoster","description":"A Google bemutatta a ClusterFuzzLite projektet, amely lehet\u0151v\u00e9 teszi a code fuzzing tesztel\u00e9st a potenci\u00e1lis sebezhet\u0151s\u00e9gek korai \u00e9szlel\u00e9s\u00e9re a folyamatos integr\u00e1ci\u00f3s rendszerek m\u0171k\u00f6d\u00e9se sor\u00e1n.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClusterFuzzLite | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 ClusterFuzzLite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c fuzzing-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u043d\u043d\u0435\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T13:36:53+00:00","article:modified_time":"2021-11-14T13:36:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102283","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 13:38:15","updated":"2022-10-05 12:38:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/102283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=102283"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/102283\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=102283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=102283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=102283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}