Wrap-Up: An Input Coverage Playbook
2023-08-11
Part of the Input Coverage series, providing a practical 8-step playbook for implementing property tests, libFuzzer, and AFL++ for comprehensive input coverage.
Blog
Appendix: Commands, Flags, And Gotchas
2023-08-04
Part of the Input Coverage series, providing essential commands, installation instructions, and common gotchas for cargo-fuzz, cargo-afl, and Rust fuzzing tools.
Appendix: Varint Shift Bug
2023-07-21
Part of the Input Coverage series, demonstrating a classic edge case where overlong LEB128 varint encoding causes panic due to missing shift cap validation.
AFL++, Original AFL, And When To Care
2023-07-14
Part of the Input Coverage series, comparing AFL++ and original AFL for Rust fuzzing, covering when to use each tool and essential configuration settings.
CI, Seeds, And Corpora Hygiene
2023-06-30
Part of the Input Coverage series, covering best practices for CI fuzzing runs, seed management, corpus hygiene, and crash handling to keep noise down.
Mocking I/O To Go Faster
2023-06-23
Fuzzers need speed but I/O is slow. Learn how to use test doubles to replace real dependencies with fake implementations for faster fuzzing iterations.
Arbitrary Models vs Raw Bytes
2023-06-09
Part of the Input Coverage series, comparing two fuzzing strategies: sharing Arbitrary models for domain logic vs using raw bytes for broader input coverage.