All interleavings yield to the same code coverage!
16
Incompleteness of CFG edge coverage
17
A multi-dimensional view of coverage in fuzzing
18
Visualizing the concurrency dimension
19
Bring fuzzing to the concurrency dimension
20
Concurrency coverage tracking
21
A straw-man solution
22
Observations on practical interleaving tracking
23
Aliased-instruction coverage
24
Active interleaving exploration - ideal case
25
Active interleaving exploration through delay injection
26
Bring them all together
27
Alias coverage growth will be saturating
28
Edge and alias coverage goes generally in synchronization
29
Conclusion and contribution
Description:
Explore kernel file system data race fuzzing in this IEEE conference talk. Learn about concurrency challenges in the Linux kernel, conventional fuzzing processes, and their limitations in detecting data races. Discover how to explicitly bring out data races using checkers, and understand the importance of locking and ordering in race detection. Examine a multi-dimensional approach to coverage in fuzzing, focusing on the concurrency dimension. Delve into concurrency coverage tracking, aliased-instruction coverage, and active interleaving exploration through delay injection. Gain insights into the relationship between alias coverage growth and edge coverage, and understand the contributions of this research to improving kernel file system security.