CAFA: A Checksum-Aware Fuzzing Assistant Tool for Coverage Improvement

Algorithm 2

Identifying checksum points using the Taint-S strategy.

Input: a well-formed sample (w), a malformed sample (m)

and the configured taint source range (offset, length)

Output: CP (checksum points)

(1) , , , ,

(2) Run the well-formed sample (w) for taint analysis

(3)

(4) Run the malformed sample (m) for taint analysis

(5)

(6)

(7)