In order to solve the problem that the driver is difficult to monitor and input complex during the running process, this paper proposed and implemented a driver fuzzing tool DrgenFuzzer based on the fitness and input constraint model. The tool utilized the kernel tracing technology combined with the static analysis of binary programs to realize the information monitoring of the driver operation, analyzed the driver interface parameters, designed a sample constraint scheme, proposed a new fitness calculation scheme and a crossover mutation scheme. Experiments show that compared with the commonly used kernel fuzzing tools, the test success rate of samples generated by this tool after the input constraint model is more than 10 times that of other tools, and the quality of the generated samples is higher. This tool performed a fuzzy test on the driver and exploits the null pointer reference vulnerability in the i2c driver. DrgenFuzzer can effectively guide and standardize sample generation, improve the success rate and operating efficiency of sample testing, and enhance the vulnerability mining ability.

[2023-02-14] Accepted Paper /doc/2022.11.0772/v1

[2023-07-05] Printed Article /doc/2022.11.0772/v2