5 ms·

That’s all true, but fuzz testing is very effective at checking boundary conditions (near 0, near max/mins) and would have caught this particular problem easily

• loup-vaillant 4y ago
  Do you mean fuzz testing does not use even distributions? There’s a bias towards extrema, or at least some guarantee to test zero and MAX? I guess that would work. Also, would you consider the following to be fuzz testing? https://github.com/LoupVaillant/Monocypher/blob/master/tests/test.c#L745L764 https://github.com/LoupVaillant/Monocypher/blob/master/tests...
  • dwohnitmok 4y ago
    No, most fuzz testing frameworks I know of these days do not use even distributions. Most use even more sophisticated techniques such as instrumenting the code to detect when state transitions are triggered to try to maximize hitting all code paths in a program instead of repeatedly fuzzing the same path.
  • yencabulator 4y ago
    The usual trick is coverage-guided fuzzing. https://google.github.io/clusterfuzz/reference/coverage-guided-vs-blackbox/ https://google.github.io/clusterfuzz/reference/coverage-guid...