From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from [140.186.70.92] (port=46052 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Q85xL-0000Ei-Qn for qemu-devel@nongnu.org; Fri, 08 Apr 2011 03:18:13 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Q85xK-0004Oa-5w for qemu-devel@nongnu.org; Fri, 08 Apr 2011 03:18:11 -0400 Received: from mail-iw0-f173.google.com ([209.85.214.173]:59373) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Q85xK-0004OW-2v for qemu-devel@nongnu.org; Fri, 08 Apr 2011 03:18:10 -0400 Received: by iwl42 with SMTP id 42so3919209iwl.4 for ; Fri, 08 Apr 2011 00:18:09 -0700 (PDT) MIME-Version: 1.0 Sender: roberto.paleari@gmail.com Date: Fri, 8 Apr 2011 09:18:08 +0200 Message-ID: From: Roberto Paleari Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: [Qemu-devel] QEMU testing methodology & results List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Dear QEMU developers, we are a group of researchers working at the University of Milan, Italy. During the last year we focused on automatic techniques to find defects inside CPU emulators and virtualizers. Our work has been published in different conference papers [1][2][3], and the testing methodologies we developed allowed us to find defects in several emulators and virtualizers, including QEMU. In these days we were asked to publicly release our experimental results. As these results also include several defects in QEMU, we believed it was better to contact you before releasing this material to the public. For this reason, we ask to whom it may concern to contact us privately at emufuzzer@security.dico.unimi.it to discuss about the disclosure of these results. Thank you very much for your help, Footnotes: [1] Testing CPU Emulators (http://roberto.greyhats.it/pubs/issta09.pdf) [2] Testing system virtual machines (http://roberto.greyhats.it/pubs/issta10-kemufuzzer.pdf) [3] A fistful of red-pills: How to automatically generate procedures to detect CPU emulators (http://roberto.greyhats.it/pubs/woot09.pdf) --=20 Roberto Paleari http://roberto.greyhats.it/ PGP Key Fingerprint: F94C 1933 F61C 3948 7CDD=A0 2C61 38C7 6116 833D D6A0