Framework for State-Aware Virtual Hardware Fuzzing

Algorithm 1

Fuzzing algorithm based on state-based fuzzing strategy.

1: ;

2: ;

3: ;

4: while do

5: ;

6: feedback = FuzzOne(t_now);

7: ifAffectKeyStruct(feedback) then

8:  ResetHardware();

9:  ifNotDuplicated(S_high,t_now) then

10:   AddTo(S_high,t_now);

11:  end if

12: end if

13: end while

14: whileTruedo

15:  mod ;

16: fordo

17:  RollBack(Q_now);

18:  for to do

19:   tnow = TestcaseMutate(Shigh,Snormal);

20:   feedback = FuzzOne(t_now);

21:   ifAffectKeyStruct(feedback) then

22:    ifNotDuplicated(S_high,t_now) then

23:     AddTo(Shigh,tnow);

24:    end if

25:   end if

26:   ifDetectNewBranch(t_now) then

27:    AddTo(S_normal);

28:   end if

29:   ifCauseCrash(feedback) then

30:    LogCrash(Q_now,t_now);

31:   end if

32:  end for

33: end for

34: end while