Appendix: Varint Shift Bug
2023-07-21
Part of the Input Coverage series, demonstrating a classic edge case where overlong LEB128 varint encoding causes panic due to missing shift cap validation.
Blog
AFL++, Original AFL, And When To Care
2023-07-14
Part of the Input Coverage series, comparing AFL++ and original AFL for Rust fuzzing, covering when to use each tool and essential configuration settings.
CI, Seeds, And Corpora Hygiene
2023-06-30
Part of the Input Coverage series, covering best practices for CI fuzzing runs, seed management, corpus hygiene, and crash handling to keep noise down.
Mocking I/O To Go Faster
2023-06-23
Fuzzers need speed but I/O is slow. Learn how to use test doubles to replace real dependencies with fake implementations for faster fuzzing iterations.
Arbitrary Models vs Raw Bytes
2023-06-09
Part of the Input Coverage series, comparing two fuzzing strategies: sharing Arbitrary models for domain logic vs using raw bytes for broader input coverage.
From Crash To Test
2023-06-02
Part of the Input Coverage series, showing how to preserve crashes by turning them into unit tests to prevent regression and maintain a permanent record of discovered bugs.
One Function To Fuzz Them All
2023-05-19
Part of the Input Coverage series, demonstrating how to create a single entry point that allows tests and fuzzers to share behavior and logic consistently.