2 ms·
> AFL can fuzz ruby by running ruby on arbitrary inputs. If you're brave (consider "system rm -rf /home") this is worth doing. I recently ran such a fuzzing t
by stevekemp 10y ago
> AFL can fuzz ruby by running ruby on arbitrary inputs.
If you're brave (consider "system rm -rf /home") this is worth doing. I recently ran such a fuzzing test against GNU Awk.
Unfortunately the bugs I reported are still unfixed, but it didn't take too long to find them, and it was a good learning exercise:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816271 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816271
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816277 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816277
I'm sure passing "random" input to Perl, Python, Ruby, and many other languages will lead to similar results.
- mytummyhertz 10y agoi've actually used AFL to find some input parsing bugs in Perl, Python, and Ruby. Perl was the team who fixed them the fastest. none of the teams (rightly) considered these particularly high impact.