Hacker News Reader

And all the bugs just caused panics, while they could have been exploitable in C.

The ASN.1 one is a different kind of crash though still sounds controlled (SIGILL).

That's LLVM's abort intrinsic - no a lot of those left around, I believe OOM, panicking while panicking and stack overflow use it or used to use it.

Of note, this report in rustc (from the list) was apparently true heap corruption due to a bug in unsafe code:

Someone on the brotli team is absolutely smitten with the tool.

What's not to be smitten about? It's like a magical bug finder.

It seems to be more that the afl-rs dev used brotli-rs as testing grounds.

If anything, it felt like I was practicing some sort of fuzz-driven-development for brotli-rs knocking out a bunch of corner cases.

Coincidentally though, I am fuzzing a different Brotli library testing some unpushed afl.rs changes: https://github.com/dropbox/rust-brotli-no-stdlib