PydanticPydantic is the most widely used data validation library for Python. Pydantic’s core validation logic is implemented in a separate package pydantic-core, where validation for most types is implemented in Rust. So Pydantic is among the fastest data validation libraries for Python.

阅读全文

Different categories of kernelStable, LTS, SLTS, rt, …

阅读全文

KernelGPT: Enhanced Kernel Fuzzing via Large Language Models ASPLOS'25 Chenyuan Yang, UIUC

阅读全文

Reproduce bugs from syzkaller logsCurrently I just got some unreprodueced and unminimized crash logs from syzkaller, there are some scripts to get the key program ledding crash and reproduce it.

阅读全文

(Syzkaller)New version of syz-manager Some new features compared to old version of syzkaller.

阅读全文

How does Syz-manager synchronize statistics information with fuzzers? How does Syz-manager gets crashes, total execution times, ... , during the fuzzing process?

阅读全文

How does Syzkaller generate a program (syscall sequences)? Hey guys! It’s been a while since I last updated my blog. Of course, I haven’t been idle during this time. I successfully published a paper and received two verbal PHD offers from CUHK. Everything is getting better and I love 2025! 2025.3.23Xiao

阅读全文

Finding the Dwarf: Recovering Precise Types from WebAssembly Binaries 会议：PLDI'22 作者：Daniel Lehmann, Michael Pradel 1. 问题背景 随着WebAssembly越来越受欢迎，在越来越多的应用领域应用，Wasm逆向的需求也越来越旺盛。例如，一个开发者可能回想了解其在项目中使用的第三方Wasm module，以更加了解其exported functions。 理解一个WebAssembly binary的第一步就是理解函数的type signatures（参数、返回值）。由于type与理解底层代码高度相关，因此现有的native binary逆向工程工具都以type为目标 [12, 14, 57]。开发人员的研究也表明，static type有助于理解代码。 但Wasm binary中的函数type种类非常受限，wasm只支持i32/i64/f32/f64四种基本类型。一个i32可能是一个signed或者unsigned integer，又或者pointer。因此，如果能恢复高级语言中的type是非常有用的。 恢复高级type的一种方法是基于 "经典 "data-flow anlysis或type inference，即根据程序中值的使用方式收集约束[12]。不过，这种方法实施起来比较复杂，而且通常需要建立在繁重的分析框架上，如 BAP 或 CodeSurfer [43, 54]。支持 WebAssembly，尤其是其略显特别的堆栈机[25]，将是一项非同小可的工作。

阅读全文

Wasmati: An efficient static vulnerability scanner for WebAssembly 作者：Tiago Brito, Pedro Lopes, Nuno Santos 时间：2022.4 期刊：Computers & Security(B刊) Code：wasmati/wasmati: A Generic and Efficient Code Property Graph Infrastructure forScanning Vulnerabilities in WebAssembly Code (github.com) ABSTRACT 本文提出了Wasmati，一种static analysis tool用于寻找Wasm binary中的漏洞。其基于code property graph(CPG)。作者给出了Wasm中CPG的定义和生成方法，自定义了快速生成CPG的算法和一个查询语言Wasmati Query Language（WQL）。作者实现了10中不同的vulnerability查询，并在四种dateset和真实程序上做了测试。

阅读全文