Available policies
These list the policy that are currently available in our fuzzing. The policies can be combined to get more complex policies.
| Class | Policy | Usage | Description |
|---|---|---|---|
| Generic | No Policy | tauri-fuzz-policies::no_policy() | No functions are monitored and this will not provoke crashes. Used if your fuzz target can inherently crash and you just want to investigate those. |
| Rule Helper | Block on entry | tauri-fuzz-policies::block_on_entry() | The function monitored with this rule will just automatically crash when called. |
| File System policies | No file access | tauri-fuzz-policies::file_policy::no_file_access() | Any access to file system will provoke a crash. |
| Read only access | tauri-fuzz-policies::file_policy::read_only_access() | Any access to file system with write access will provoke a crash. | |
| No access to filenames | tauri-fuzz-policies::file_policy::no_access_to_filenames(filenames) | Any access to the files given as parameter will provoke a crash. | |
| Child process | Invocation of child process through Rust std is blocked | tauri-fuzz-policies::external_process::block_on_entry() | Any child process created through Rust std::process is blocked |
Invocation of child process through Rust std is monitored | tauri-fuzz-policies::external_process::block_monitored_binaries(binaries) | Any child process created through Rust std::process is monitored and specified binaries are blocked | |
Block any child process created through Rust std returning an error | tauri-fuzz-policies::external_process::block_rust_api_return_error() | Any child process created through Rust std::process will be blocked if returning an error status | |
| Block any child process returning an error | tauri-fuzz-policies::external_process::block_on_libc_wait_error_status() | Any child process created and waited with wait, waitpid or waitid will be blocked if returning an error status | |
| Generic | Block any calls to the host system that returns an error | tauri-fuzz-policies::no_error_policy() | We plan to monitor: child processes, file system and networking (ongoing work) |