moodmosaic

AFL++, Original AFL, And When To Care

This post is part of the Input Coverage > Code Coverage series.

Use AFL++ with cargo-afl. It is maintained and feature-rich. Original AFL can fuzz Rust via QEMU mode, but slower and clunkier.

If you need stdin or CLI paths or process isolation, use AFL++. If libFuzzer stalls, try AFL++ next.

Always set -C panic=abort when fuzzing with AFL++. Keep it local to runs.


Next: Appendix: Varint Shift Bug