Fuzzing The CSV CLI With AFL++
2023-04-28
Part of the Input Coverage series, showing how to fuzz the CSV CLI binary with AFL++ using persistent harnesses and panic=abort configuration.
Blog
Enterprise Case 2: CSV Import CLI, Unbounded Header
2023-04-21
Part of the Input Coverage series, demonstrating how a CSV CLI trusts unbounded header values, leading to memory allocation aborts that property tests miss.
Fuzzing The Money Parser With libFuzzer
2023-04-07
Part of the Input Coverage series, demonstrating how to add a minimal libFuzzer target to discover Unicode minus bugs in money parsing logic.
Enterprise Case 1: Money Parser, Unicode Minus
2023-03-31
Part of the Input Coverage series, demonstrating how Unicode minus (U+2212) from Excel breaks money parsing invariants that property tests miss.
Minimal Fuzzing Without The Pain
2023-03-17
Part of the Input Coverage series, showing how to set up a boring but effective fuzzing workflow with one entry point, property tests, libFuzzer, and AFL++.
Property Tests Are Not A Fuzzer
2023-03-03
Part of the Input Coverage series, explaining the fundamental differences between property tests and fuzzers, and why you need both for comprehensive testing.
Heterogeneous test-suites
2023-02-27
Part of the Pandora series, exploring how to combine TypeScript and native Clarity testing approaches for comprehensive smart contract coverage.