HartBreaker: Deterministic Fuzzing of Multi-Hart RISC-V CPUs
HartBreaker is a novel hardware fuzzer designed for multi-hart RISC-V CPUs, addressing challenges posed by non-deterministic programs. It introduces a technique called determinism anchors, enabling effective testing of communication channels in these CPUs. The tool has successfully identified previously unknown concurrency bugs in several open-source RISC-V CPU designs.
- ▪HartBreaker is the first general-purpose hardware fuzzer for multi-hart RISC-V CPUs.
- ▪It uses a technique called determinism anchors to manage non-deterministic behavior during testing.
- ▪The fuzzer has discovered five previously unknown concurrency bugs in well-tested open-source RISC-V CPUs.
Opening excerpt (first ~120 words) tap to expand
HartBreaker: Deterministic Fuzzing of Multi-Hart RISC-V CPUs with Non-Deterministic Programs HartBreaker is the first general-purpose hardware fuzzer that tests the communication channels of multi-hart RISC-V CPUs, including shared memory and inter-processor interrupts. To make this possible, HartBreaker addresses a fundamental obstacle that has so far kept hardware fuzzing confined to single-core designs: the execution of a multi-hart program is inherently non-deterministic, so the deterministic golden-model comparison on which existing fuzzers rely does not work.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Ethz.