Martin Bosslet

Fuzzer to test robustness against malicious data

1

We should write a fuzzer that throws completely random and part random/part hand-crafted data at ASN.1 decode to test for SEGVs/NPEs with regard to malicious data or buffer overflows. The...

Top-level description of Instream, Header, Parser, Asn.1. Architectural overview of pull-parsing, lazy parsing and caching of parsed values. Explain advantages of caching not only in terms of performance, but also...