CAFA: A Checksum-Aware Fuzzing Assistant Tool for Coverage Improvement

Table 5

Time costs of the identification strategies.

application/input specification	strategy	Taint labels	Execution instructions	Taint propagation instructions	Time(s)
ImageMagick/PNG	Taint-S()	22	30208236	257593	39.6
	Taint-S()	4	30208236	246218	39.064
	CRC32-S	1	26930357	171682	34.852
optipng/PNG	Taint-S()	22	9757991	6443746	420.204
	Taint-S()	4	9757991	450169	15.12
	CRC32-S	1	9481512	469328	13.208
pngcheck/PNG	Taint-S()	22	93055	12557	4.94
	Taint-S()	4	93055	3600	4.696
	CRC32-S	1	66818	7579	3.884
tcpdump/UDP	Taint-S()	8	2705841	119554	17.272
	Taint-S()	2	2706099	118972	17.14
tcpdump/TCP	Taint-S()	20	2683483	123458	17.756
	Taint-S()	2	2677279	118766	17.512
tcpdump/IP	Taint-S()	20	2675810	138548	18.508
	Taint-S()	2	2675552	119072	17.688
tcpdump/IGMP	Taint-S()	16	2718334	130481	17.94
	Taint-S()	2	2716120	120090	17.432
tar/TAR	Taint-S()	500	372314	28730	16.368
	Taint-S()	8	372314	20786	9.872
gzip/GZIP	Taint-S()	33	308253	8756	4.452
	Taint-S()	4	308253	8387	4.356
unzip/ZIP	Taint-S()	38	287077	7643	9.552
	Taint-S()	4	287077	4631	9.228
rar/RAR	Taint-S()	52	291489	75422	12.408
	Taint-S()	2	291489	22884	10.128