PDFuzzerGen: Policy-Driven Black-Box Fuzzer Generation for Smart Devices
Algorithm 2
Dynamic Parameter Discovery.
Input: Potential function message
Output: Parameter discovery results
(1)
For each message in , identify the message type and parameter position of all submitted parameters.
(2)
For each position in each type , extract the original complete parameter data structure .
(3)
Determine the type of . Use the analysis module corresponding to to analyze , record all parameter dependency , and obtain all key-value pair information :.
(4)
For each , mark as the target test parameter, and remains unchanged. At the same time, record the and corresponding to , which are recorded as .
(5)
Count all the and record them as .
(6)
According to the parameter dependence relationship , calculate the parameter test value . For each higher level of parameter depth, the potential value increases by one.
