Is it possible that using the jazzer fuzz the Android thiry party

[william31212]

Hi, is it possible using the jazzer fuzz android third party. For instance, glide is android image parser third party. However, I am not sure that the bottom layer is different (dalvik vm, jvm) will make jazzer cannot fuzz it.

[fmeum]

I don't have a good answer to this at this point in time since I am not very familiar with the foundations of Java on Android. I'm planning to improve on that state in the upcoming weeks and will post an update if I have one.

[TheCoryBarker]

@william31212 is this something you are still interested in? Do you want me to keep you updated?

I am working on getting the running Jazzer on Android checked in. I have a PR out for this but I am also going to need to follow this up with another check in for offline instrumentation before it will be easy to fuzz Android.

[william31212]

@TheCoryBarker I am still interested in fuzzing Android. Is your PR mention on the Android's SDK or other target?

[TheCoryBarker]

Here is my PR:
#587

after this I need to update Jazzer to instrument offline. I'm starting the offline instrumentation next week, and I expect it will be fairly quick so I should have a PR out for it by next Friday. I'll send you an update once this is done.

[ghost]

Hi @william31212 and @TheCoryBarker !
I know this was over a year a go, but how did it turn out? Did the pull request get accepted?
Happy to explore this in more detail with each of you.
We can also take this "offline" over email. I am david.merian[at]code-intelligence[dot]com

Cheers,
Dave

[TheCoryBarker]

It's very difficult to use at this stage without a lot of knowledge on how APKs are build. I'm working on another PR that will make fuzzing your Android apps easy. I'll send you an email when it's ready David and then we can circle back and update here