Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes, that is exactly how it works, there is nothing that would require source code access.

If you have a Java app packaged as app.jar, all you need to do is write a fuzz target (with the fuzzerTestOneInput function) and package it into e.g. target.jar. Then you can run jazzer with

  --cp=app.jar:target.jar --target_class=fuzz.target.Class


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: