bddisasm

>"MISHEGOS is a differential fuzzer for x86-64 instruction decoders. Instead of relying on a “golden” decoder or hardware decoder for ground truth within its difference oracle, MISHEGOS runs multiple unreliable decoders in parallel on an instruction candidate and uses their consensus or disagreement to mark the input as likely erroneous. As of writing, nine x86-64 instruction decoders written in a variety of languages can be fuzzed by MISHEGOS: • GNU libopcodes (C) [21] (https://www.gnu.org/software/binutils/) • Capstone (C++) [22] (https://github.com/capstone-engine/capstone) • DynamoRIO (C and C++) [2] (https://github.com/DynamoRIO/dynamorio) • fadec (C) [23] (https://github.com/aengelke/fadec) • Udis86 (C) [24] (https://github.com/vmt/udis86) • Intel XED (C) [25] (https://github.com/intelxed/xed) • Zydis (C) [26] (https://github.com/z

Bddisasm is a nice piece of work! The last few years have seen a real explosion in the number and quality of open source x86 decoders. The Bitdefender team states in their README that they've been using my differential fuzzer[1] to test bddisasm's resiliency[2]. I have no reason to doubt them, but it would certainly be interesting to see the results of a few hours of fuzzing against some near-or-equally high quality decoders (i.e. Zydis and XED). [1]: https://github.com/trailofbits/mishegos [2]: https://github.com/bitdefender/bddisasm#objectives