Security Analysis of OVS Fuzzers

OvS fuzzer harnesses test different components of OvS. This document performs a security analysis of these harnesses. The intention is to not only tabulate what is currently done but also to help expand on the set of harnesses.

Fuzzer harness	Interface	Input source
flow_extract_target	External	Untrusted
json_parser_target	OVS DB	Trusted
miniflow_target	External	Untrusted
odp_target	North-bound	Trusted
ofctl_parse_target	Management	Trusted
ofp_print_target	South/North-bound	Trusted

Integration Guide for Centralized Control ›

‹ OVS Fuzzers

Contents

• Project

• Getting Started
• Tutorials
• How-to Guides
• Deep Dive
  • OVS
    • Design Decisions In Open vSwitch
    • Open vSwitch Datapath Development Guide
    • Fuzzing
    • Integration Guide for Centralized Control
    • Porting Open vSwitch to New Software or Hardware
    • OpenFlow Support in Open vSwitch
    • Bonding
    • Open vSwitch Networking Namespaces on Linux
    • Scaling OVSDB Access With Relay
    • OVSDB Replication Implementation
    • DPDK Support
    • OVS-on-Hyper-V Design
    • Language Bindings
    • Debugging with Record/Replay
    • Testing
    • Tracing packets inside Open vSwitch
    • Userspace Datapath - TSO
    • C IDL Compound Indexes
    • Open vSwitch Extensions
    • Userspace Datapath - Checksum Offloading
    • Userspace Tx packet steering
    • User Statically-Defined Tracing (USDT) probes
    • Visualizing flows with ovs-flowviz
• Reference Guide
• Open vSwitch Internals
• Open vSwitch Documentation
• FAQ

Browse

• General Index
• Integration Guide for Centralized Control
• OVS Fuzzers

Navigation

• Open vSwitch 3.5.90 documentation
  • Deep Dive
    • Fuzzing
      • Security Analysis of OVS Fuzzers