4 ms·

Nice! It’s already proven to be useful: https://github.com/frewsxcv/afl.rs#trophy-case https://github.com/frewsxcv/afl.rs#trophy-case

• legulere 10y ago
  And all the bugs just caused panics, while they could have been exploitable in C.
  • fulafel 10y ago
    The ASN.1 one is a different kind of crash though still sounds controlled (SIGILL).
    • eddyb 10y ago
      That's LLVM's abort intrinsic - no a lot of those left around, I believe OOM, panicking while panicking and stack overflow use it or used to use it.
  • comex 10y ago
    Of note, this report in rustc (from the list) was apparently true heap corruption due to a bug in unsafe code: https://github.com/rust-lang/rust/issues/24276 https://github.com/rust-lang/rust/issues/24276
• zamalek 10y ago
  Someone on the brotli team is absolutely smitten with the tool.
  • StavrosK 10y ago
    What's not to be smitten about? It's like a magical bug finder.
  • masklinn 10y ago
    It seems to be more that the afl-rs dev used brotli-rs as testing grounds.
    • frewsxcv 10y ago
      If anything, it felt like I was practicing some sort of fuzz-driven-development for brotli-rs knocking out a bunch of corner cases. Coincidentally though, I am fuzzing a different Brotli library testing some unpushed afl.rs changes: https://github.com/dropbox/rust-brotli-no-stdlib https://github.com/dropbox/rust-brotli-no-stdlib