Fuzzing

LWN has a great article about the history of syscalls fuzzing, a practise that apparently dates back to the mid-1990s.

In 2007, Tavis Ormandy and Michał Zalewski started to publicly play around with coverage based fuzzers. They weren’t the only ones, for example Jared Demott gave a talk on this topic at DEFCON 14. This resulted in the publication of AFL in 2013, yielding a phenomenal amount of bugs.

Microsoft is apparently massively fuzzing its Windows operating system since at least Vista, released in 2006.

In March 2016, Linux gained support for KCOV, thanks to Dmitry Vyukov, based on a patch from Quentin Casasnovas. KCOV was apparently already used internally at Google for a couple of months, according to the commit message.

In August 2018, OpenBSD gained support for KCOV as well, thanks to Anton Lindqvist.

In 2019, Microsoft ported ASAN to Windows.

OpenBSD is being fuzzed by syzkaller, since 2018, resulting in a couple of crashes.

The coverage is low-ish for now, but the good news is that the number of syscalls and ioctl are steadily increasing!

Jesse Hertz and Tim Newsham from ncc group ported TriforceAFL on OpenBSD, but unfortunately, the project isn’t maintained anymore.

Sanitizers

Fuzzing is great, but without sanitizers, a lot of bugs are going unnoticed. Unfortunately, OpenBSD only supports KUBSAN: