3 ms·

Interesting, but I suppose you still need a human to verify whether its valid or invalid grammar.

• berti 8y ago
  And be careful that you don't break real code trying to fix something obscure that's never likely to be seen in real code.
• comex 8y ago
  Not really. I took a look at some of the reported bugs, and all of the test cases seemed to be invalid code in some way, though often due to type or semantic errors rather than bad syntax. But the fuzzer is looking for crashes or internal compiler errors, which represent a bug regardless of how bogus the input to the compiler was.
  • ksk 8y ago
    You're quite right. I used to work on fuzzers/fault-injectors in a previous job so I was interested because I thought they had figured out a way to find bugs by generating valid grammar. Not putting down what they've done though..
• bjoli 8y ago
  When the syntax is invalid, you should get an error saying that the syntax is invalid. Not a compiler crash and definitely not a segfault.
  • ksk 8y ago
    Agreed.