This post is part of the Input Coverage > Code Coverage series.
Use AFL++ with cargo-afl
. It is maintained and feature-rich.
Original AFL can fuzz Rust via QEMU mode, but slower and clunkier.
If you need stdin or CLI paths or process isolation, use AFL++. If libFuzzer stalls, try AFL++ next.
Always set -C panic=abort
when fuzzing with AFL++.
Keep it local to runs.