[Linux-内核测试] -- Trinity测试

What is trinity test ?

Trinity, a system call fuzzing tester for the Linux kernel. Fuzzing is a security technique which feeds random arguments into functions to see what breaks.

Trinity is developed using the latest glibc/kernel, which means from time to time
changes are introduced which may make it fail to compile on older distributions
(especially enterprise ones). The preferred way to fix this is to add the missing
declarations to compat.h

What does trinity support for ?

Trinity supports Alpha, Aarch64, ARM, i386, IA-64, MIPS, PowerPC-32, PowerPC-64, S390, S390x, SPARC-64, x86-64.

Tracking bugs about trinity

http://codemonkey.org.uk/projects/trinity/bugs-found.php

Download and Install Triniy

Download the source code : https://github.com/kernelslacker/trinity

git clone https://github.com/kernelslacker/trinity.git

Or you can download the release version to do trinity test
https://github.com/kernelslacker/trinity/releases (the latest version is v1.7)

unzip trinity-<version>.zip
cd trinity-<version>
./configure
make
sudo make install

The parameters about Trinity

How to do Trinity test ?

The issues about make and install trinity :

check glibc version, for example ubuntu-16.04 (x86_64) :

ll /lib/x86_64-linux-gnu/libc.so.6
lrwxrwxrwx 1 root root 12 8月 25 14:51 /lib/x86_64-linux-gnu/libc.so.6 -> libc-2.23.so* <======> so the glibc version is 2.23

Download latest glibc version and install it :
http://ftp.gnu.org/gnu/glibc/

Reference

https://github.com/kernelslacker/trinity
http://codemonkey.org.uk/projects/trinity/
http://www.h-online.com/open/news/item/Trinity-Linux-system-call-fuzzer-updated-1790272.html

最后编辑于
©著作权归作者所有,转载或内容合作请联系作者
平台声明:文章内容(如有图片或视频亦包括在内)由作者上传并发布,文章内容仅代表作者本人观点,简书系信息发布平台,仅提供信息存储服务。

推荐阅读更多精彩内容