Re: [Xen-devel] Livepatching and Xen Security

[Andrew Cooper <andrew.cooper3@xxxxxxxxxx>]

On 19/05/17 15:32, Wei Liu wrote:
> On Thu, May 18, 2017 at 08:07:00PM +0100, Andrew Cooper wrote:
>> I would ask however how confident we are that there are no ELF parsing
>> bugs in the code?  I think it might be very prudent to try and build a
>> userspace harness for it and let ALF have a go.
>>
> There is already a fuzzing harness in tools/fuzz for libelf.  Feel free
> to use it with either AFL or LLVM fuzzer. :-)
>
> If it doesn't work, report it and I will fix it.

livepatching doesn't use libelf.

It is a new ELF parsing implementation.

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel