3 ms·
How to Fuzz an ADT Implementation (2013)
- agroce 7y agohttps://blog.trailofbits.com/2019/01/22/fuzzing-an-api-with-deepstate-part-1/ https://blog.trailofbits.com/2019/01/22/fuzzing-an-api-with-... provides a little more friendly way (with delta-debugging and save/replay, and ability to use more fuzzers) to do this, via DeepState
- taborj 7y agoYet another article that uses an acronym and then doesn't bother cluing us in to what it stands for. I build healthcare interfaces; ADT means demographics. What's it mean here?
- cryptonector 7y agoAbstract data type.
- zem 7y agoeven in a programming context i thought it was going to be 'algebraic datatype'
- jkaptur 7y ago> Testing is necessarily incomplete but if you beat the crap out of the subset of the API that you actually intend to use, it’s possible to become reasonably confident that it will work in practice. This is the kicker for me. I'm not a C++ expert, but knowing that a coverage-guided fuzzer has been running against my code for the past few months gives me a lot of confidence.
- antirez 7y agoThis is how rax (https://github.com/antirez/rax https://github.com/antirez/rax) and most of Redis is tested. Indeed this is the only way to be confident about a complex data structure implementation sanity.