CI, Seeds, And Corpora Hygiene
This post is part of the Input Coverage > Code Coverage series.
Keep noise down.
- CI: run 30–60 seconds per target. Fail on crash.
- Seeds: a handful of representative inputs.
- Corpora: dedupe and minimize. Version control is fine.
- Crashes: store minimized inputs only. Add tests.
- Budgets: long runs are for local hunts or nightly jobs.
Makefile:
fuzz:
cargo +nightly fuzz run target -max_total_time=60
afl:
RUSTFLAGS="-C panic=abort" cargo afl build -F afl --bin fuzz-afl
mkdir -p afl_in afl_out
printf "seed" > afl_in/seed
cargo afl fuzz -i afl_in -o afl_out target/debug/fuzz-afl @@