Getting Started


Instructions for downloading Metafuzz, installing, and getting started.

Send questions to David Molnar (


You may want to start first with our pre-made VMWare Player image:

Getting Started - Premade VM



0. Set up your environment.


Install Debian etch. The rest of these instructions have been tested on Debian Etch, but they may work on other distributions of Linux, as well.

Known bug: Catchconv is a fork of Valgrind 3.2.2, which does not handle the most recent glibc. The "dozzuf" script for running zzuf and uploading results to will still work.


For a virtual machine approach on Windows, try VMWare Player:


with this Debian Etch VM:


1. Install dependencies


First become root by using the su command. Type




and respond with the root password when prompted.

Then, as root, type


apt-get install autoconf automake g++ libcurl3 libcurl3-dev libexpat1 libexpat1-dev mplayer cvs imagemagick


Answer yes when it asks you whether you want to continue and when it asks whether you want to install the packages without verification. The necessary packages should download and install automatically. Make sure you have a fast net connection. If you get an error message like "E: Unable to fetch some archives, maybe run apt-get update or ...", try running apt-get update and then run the apt-get install (...) command above again.

Then, after this finishes, log out of the root account (type exit).


2. Check out Catchconv and Metafuzz from anonymous CVS


As user, go to the "/home/user" directory. Type:

cvs login  


Press Enter at the password: prompt, to use the empty password. Then run:


cvs -z3 co -P valgrind-catchconv

 This will create a new directory "/home/user/valgrind-catchconv"


3. Run bootstrap


Pick a directory to store Catchconv scripts and test runs. Let us say /home/user/vgcc as an example.

Then type the following as user:


cd /home/user/valgrind-catchconv/

chmod u+x bootstrap

./bootstrap /home/user/vgcc


You will be prompted for an e-mail address.  Enter whatever e-mail you like.


4. Set up environment variables


Run the following command

source /home/user/vgcc/bin/cc_envars



5. Pick a seed file and start running!


      Run  'singlemachine <file>' . Try an MP3 file to start.


The script will automatically create a directory for the test run, then start Catchconv. Now new bugs found will be uploaded to , along with statistics on the progress of the test run.


You can also run Catchconv or zzuf directly by using the following commands:


     docatchconv <seed file> <command>

     dozzuf <seed file> <command>


For example

     dozzuf test.mp3 mplayer test.mp3


will run zzuf with the seed "test.mp3" on the command "mplayer test.mp3". Statistics and failing test cases will show up on for you to deal with at your leisure.



Using the Pre-made VM


First, make sure that you have either VM player, VM Workstation, or VM Fusion (for Mac)


1. Download the zip file at

2. Unzip the file.

3. Double-click on DebianEtch.vmw file in the unzipped folder. This should open up the pre-loaded VM onto your VM software.

4. The username and password are root.