Jfrog, Ltd.

Vdoo Connected Trust Ltd.

Ilya Khivrich

Shachar Menashe

Asaf Karas

A method, system and product comprising determining a characterization of a terminal within a binary code based on influences of the terminal, the characterization of the terminal indicates a role of the terminal in the binary code; based on the characterization of the terminal, determining that the terminal is potentially affected by external input to a device executing the binary code; determining for the terminal a corresponding propagation path within the binary code indicating a terminal reachability within the binary code; locating in the binary code a code patch associated with a functionality of the binary code, the code patch is associated with the propagation path of the terminal, the code patch can be executed independently from the binary code; extracting the code patch from the binary code for testing; generating an emulation of the code patch to enable fuzz testing of the emulation, the code patch is tested independently.

Extracting code patches from binary code for independent fuzz testing

A method, system and product for determining a characterization of a terminal within a binary code, based on influences of the terminal. Based on the characterization of the terminal, the terminal is determined to be potentially affected by external input that is inputted to a device executing the binary code. A propagation path that indicates a reachability of the terminal within the binary code is determined. A code patch associated with a functionality of at least a portion of the binary code and with the propagation path of the terminal is located in the binary code. The code patch can be executed independently from the binary code. The code patch is extracted from the binary code for testing, and an emulation of the code patch is generated to enable fuzz testing of the emulation, whereby the code patch is tested independently.

Growing community of inventors

Rehovot, Israel

Ilya Khivrich