From 15cea0a381c6ef9a7b4ffb2770360ce8882274c5 Mon Sep 17 00:00:00 2001 From: Patrick Meyer Date: Wed, 1 Sep 2021 14:42:23 +0200 Subject: docs: document how to fuzz macOS --- docs/darwin/found_bugs.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 docs/darwin/found_bugs.md (limited to 'docs/darwin/found_bugs.md') diff --git a/docs/darwin/found_bugs.md b/docs/darwin/found_bugs.md new file mode 100644 index 000000000..43e28eda5 --- /dev/null +++ b/docs/darwin/found_bugs.md @@ -0,0 +1,14 @@ +# Found bugs + +[panicall](https://twitter.com/panicaII) has ported +([[1]](https://i.blackhat.com/eu-18/Wed-Dec-5/eu-18-Juwei_Lin-Drill-The-Apple-Core.pdf) +([video](https://www.youtube.com/watch?v=zDXyH8HxTwg)), +[[2]](https://conference.hitb.org/hitbsecconf2019ams/materials/D2T2%20-%20PanicXNU%203.0%20-%20Juwei%20Lin%20&%20Junzhi%20Lu.pdf)) +syzkaller to `Darwin/XNU` and that has found more than +[50 bugs](https://twitter.com/panicaII/status/1070696972326133760) including +`CVE-2018-4447` and `CVE-2018-4435` mentioned in +[Apple security updates](https://support.apple.com/en-us/HT209341). However he +didn't upstream his work. + +Since 2021 Syzkaller is able to fuzz macOS, however it's not integrated into +syzbot for licensing reasons. \ No newline at end of file -- cgit mrf-deployment