Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2604.19824 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866908985809960960 |
|---|---|
| author | Ghinami, Chiara Tresolavy, Igor Pontes Seibt, Luis Bosbach, Nils Leupers, Rainer |
| author_facet | Ghinami, Chiara Tresolavy, Igor Pontes Seibt, Luis Bosbach, Nils Leupers, Rainer |
| contents | The increasing complexity of embedded software has made comprehensive manual testing impractical, motivating the use of automated techniques such as fuzzing. Coverage-guided fuzzers like AFL++ have shown strong results for conventional software but remain challenging to apply effectively in embedded contexts, where peripheral behaviors play critical roles. Existing approaches either use fast user-mode simulators, sacrificing peripheral realism, or rely on full-system simulators with manual instrumentation, limiting applicability to large-scale software. In this work, we present a novel framework that integrates AFL++ with a stateful SystemC-TLM virtual prototype to enable realistic fuzzing of embedded software. Fuzzer-generated inputs are injected directly into peripheral models, allowing peripherals to trigger natural side effects such as interrupts and FIFO updates. By integrating fuzzing with full-system simulation, our framework advances the effectiveness of pre-silicon testing for embedded systems. Results on embedded workloads show that our approach eliminates false positives while maintaining comparable code coverage and execution performance as state-of-the-art tools. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2604_19824 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | Stateful Embedded Fuzzing with Peripheral-Accurate SystemC Virtual Prototypes Ghinami, Chiara Tresolavy, Igor Pontes Seibt, Luis Bosbach, Nils Leupers, Rainer Software Engineering The increasing complexity of embedded software has made comprehensive manual testing impractical, motivating the use of automated techniques such as fuzzing. Coverage-guided fuzzers like AFL++ have shown strong results for conventional software but remain challenging to apply effectively in embedded contexts, where peripheral behaviors play critical roles. Existing approaches either use fast user-mode simulators, sacrificing peripheral realism, or rely on full-system simulators with manual instrumentation, limiting applicability to large-scale software. In this work, we present a novel framework that integrates AFL++ with a stateful SystemC-TLM virtual prototype to enable realistic fuzzing of embedded software. Fuzzer-generated inputs are injected directly into peripheral models, allowing peripherals to trigger natural side effects such as interrupts and FIFO updates. By integrating fuzzing with full-system simulation, our framework advances the effectiveness of pre-silicon testing for embedded systems. Results on embedded workloads show that our approach eliminates false positives while maintaining comparable code coverage and execution performance as state-of-the-art tools. |
| title | Stateful Embedded Fuzzing with Peripheral-Accurate SystemC Virtual Prototypes |
| topic | Software Engineering |
| url | https://arxiv.org/abs/2604.19824 |