π How does a #fuzzer find a 3-byte crash sequence in 9,000 iterations instead of 16 million? π Coverage turns a multiplicative problem into an additive one. I built a minimal #rustlang fuzzer from scratch to understand how it works: pierrezemb.fr/posts/diving...
pierrezemb.frDiving Into Coverage-Guided FuzzingHow a 600-line Rust fuzzer discovers a 3-byte crash sequence in 9,000 iterations instead of 16 million
0 reposts6 likes