4 ms·
Not sure about that one. Fuzzers have a hard time creating certain narrow preconditions that a manual review can find.
by anematode 8mo ago
Not sure about that one. Fuzzers have a hard time creating certain narrow preconditions that a manual review can find.
- yalok 8mo agois Google using LLM-guided fuzzers that can inspect the code first?
- bastawhiz 8mo agoGoogle, to their credit, has invested a TON of money into both manual review and also fuzzers. Every major fuzzing project I've read about in the last few years has been at least funded in part by Google.
- UncleMeat 8mo agoThey’ve gotten way better at this over the last decade with coverage guided execution.
- anematode 8mo agoWell, yes and no. For example, coverage-guided fuzzers won't reliably find the taken branch in if (hash(x) == 0x12345678) { } Of course this is contrived, but you can imagine something similar where it requires a delicate setup for that branch to be taken at all, that a human (or these days, an LLM) can find straightforwardly.