Coverage-guided fuzzing in Rust and Go
2023-11-15
Traditional fuzzers like AFL and libFuzzer have adapted to memory-safe targets, hunting for panics and logic errors instead of memory corruption using coverage-guided evolution.
Blog
Why fuzzing still matters in memory-safe languages
2023-11-01
Memory-safe languages like Rust and Go eliminate buffer overflows by design, yet fuzzing remains critical for finding the bugs that type systems can't catch.
Fuzzing in Memory-Safe Languages
2023-10-15
Fuzzing in memory-safe languages has evolved beyond hunting memory corruption to target logic errors, panics, and concurrency bugs while property-based testing provides semantic validation.
Wrap-Up: An Input Coverage Playbook
2023-08-11
Part of the Input Coverage series, providing a practical 8-step playbook for implementing property tests, libFuzzer, and AFL++ for comprehensive input coverage.
Appendix: Commands, Flags, And Gotchas
2023-08-04
Part of the Input Coverage series, providing essential commands, installation instructions, and common gotchas for cargo-fuzz, cargo-afl, and Rust fuzzing tools.
Appendix: Varint Shift Bug
2023-07-21
Part of the Input Coverage series, demonstrating a classic edge case where overlong LEB128 varint encoding causes panic due to missing shift cap validation.
AFL++, Original AFL, And When To Care
2023-07-14
Part of the Input Coverage series, comparing AFL++ and original AFL for Rust fuzzing, covering when to use each tool and essential configuration settings.