3 ms·

"we used a fuzzer to minimize a corpus of 10 million PDF files down to 4,200 without any loss of code coverage" Did they need a fuzzer for that? They could've

by yyyk 4mo ago

"we used a fuzzer to minimize a corpus of 10 million PDF files down to 4,200 without any loss of code coverage" Did they need a fuzzer for that? They could've render them all and see what's exercised?

thechao 4mo ago
Its a set cover problem, and is NP-hard. 4100 of something probably runs nicely in your laptop in a reasonable amount of time.
numist 3mo ago
We did "render them all and see what's exercised" by using libFuzzer's -merge=1 option. No new PDFs were generated during corpus minimization.