It might be fun to besides doing fuzzing, use other software correctness / formal methods tools such as abstract interpretation or type systems to report run-ti

It might be fun to besides doing fuzzing, use other software correctness / formal methods tools such as abstract interpretation or type systems to report run-time errors. I mean, fuzzing will not detect all runtime errors, so the formal methods crowd might suggest to just throw all your tools in the toolbox to maximize run-time error elimination. Delegate everything to fuzzing is fun though (fitting for the name "candy" and the minimalistic premise).