3 ms·
Just fuzz every parser you write. And the problem is solved.
by Go0the0gophers 8y ago
Just fuzz every parser you write. And the problem is solved.
- whyever 8y agoI agree with the idea, but I don't think it is enough: A fuzzer does not necessarily find all problems.
- Go0the0gophers 8y agoI wrote several parsers that I fuzzed with tools like AFL or gofuzz. And I promise you that fix lot ugly corner cases.
- gsnedders 8y agoThe problem fundamentally is different parsers parsing the same string into different component values. Fuzzing won't solve that.