Re: Fwd: Testing for Shellshock...

2014-10-15 Thread Eduardo A . Bustamante López
> I believe it would be interesting to measure the combinatorial coverage of > the fuzz tests. You already asked this... why didn't you follow up in the thread that you started? > [...] So we would be able to say what percentage of 2-way, > 3-way, etc. combinations are covered, which would be use

Fwd: Testing for Shellshock...

2014-10-15 Thread Rick Karcich
Inasmuch as, there apparently is now a fuzz test script(courtesy of Michal Zalewski, < http://lcamtuf.blogspot.ie/2014/10/bash-bug-how-we-finally-cracked.html > that identifies the bash bug... I believe it would be interesting to measure the combinatorial coverage of the fuzz tests. So we would