Panics Are Not Crashes
2023-05-12
Part of the Input Coverage series, explaining the difference between Rust panics and crashes in fuzzing contexts, and how to force crashes for proper fuzzer detection.
Blog
Fuzzing The CSV CLI With AFL++
2023-04-28
Part of the Input Coverage series, showing how to fuzz the CSV CLI binary with AFL++ using persistent harnesses and panic=abort configuration.
Enterprise Case 2: CSV Import CLI, Unbounded Header
2023-04-21
Part of the Input Coverage series, demonstrating how a CSV CLI trusts unbounded header values, leading to memory allocation aborts that property tests miss.
Fuzzing The Money Parser With libFuzzer
2023-04-07
Part of the Input Coverage series, demonstrating how to add a minimal libFuzzer target to discover Unicode minus bugs in money parsing logic.
Enterprise Case 1: Money Parser, Unicode Minus
2023-03-31
Part of the Input Coverage series, demonstrating how Unicode minus (U+2212) from Excel breaks money parsing invariants that property tests miss.
Minimal Fuzzing Without The Pain
2023-03-17
Part of the Input Coverage series, showing how to set up a boring but effective fuzzing workflow with one entry point, property tests, libFuzzer, and AFL++.
Property Tests Are Not A Fuzzer
2023-03-03
Part of the Input Coverage series, explaining the fundamental differences between property tests and fuzzers, and why you need both for comprehensive testing.