3 ms·

We recently posted about fuzzying a compiler with success [1]. The article contains the details. There is an error on the Zest link that should point to [2]. Th

by wslh 2y ago

We recently posted about fuzzying a compiler with success [1]. The article contains the details. There is an error on the Zest link that should point to [2]. The key is how to craft the generator. [1] https://www.coinfabrik.com/blog/why-the-fuzz-about-fuzzing-compilers/ https://www.coinfabrik.com/blog/why-the-fuzz-about-fuzzing-c... [2] https://dl.acm.org/doi/10.1145/3293882.3330576 https://dl.acm.org/doi/10.1145/3293882.3330576

JonChesterfield 2y ago
> Rust’s implementation of LibFuzzer, Would that be the LLVM one wrapped in some rust API? From the last month or so accidentally rabbit holed by fuzz testing I am really liking the LLVM one but have a vague sense that I should probably try AFL++ as well. The paper suggests it was a java implementation distinct from those two. The approach of turning the bytestring into a program is good, worth looking at the IR fuzzer in the LLVM suite - this looks like a fair reference for it https://arxiv.org/abs/2402.05256 https://arxiv.org/abs/2402.05256