2 ms·

Why differential fuzzing did not catch these bugs? https://github.com/uutils/coreutils/tree/main/fuzz/uufuzz https://github.com/uutils/coreutils/tree/main/fuzz

• ozgrakkurt 6mo ago
  Looks like it doesn't really fuzz much. https://github.com/uutils/coreutils/tree/main/fuzz/fuzz_targets https://github.com/uutils/coreutils/tree/main/fuzz/fuzz_targ... Maybe these tests aren't even fuzz tests? https://github.com/uutils/coreutils/blob/main/fuzz/fuzz_targets/fuzz_seq.rs https://github.com/uutils/coreutils/blob/main/fuzz/fuzz_targ... Even the tests that look ok are not that good in my opinion because there is no structure to it: https://github.com/uutils/coreutils/blob/main/fuzz/fuzz_targets/fuzz_seq_parse_number.rs https://github.com/uutils/coreutils/blob/main/fuzz/fuzz_targ... It should also try to generate mostly correct but slightly wrong things instead of just dumping random data into it. Seems to also not expect some fuzz tests to even pass in the CI: https://github.com/uutils/coreutils/blob/a07879b8ab2bb8fe5e0f6ae3e9312bd4fb8fd4aa/.github/workflows/fuzzing.yml#L88 https://github.com/uutils/coreutils/blob/a07879b8ab2bb8fe5e0...