Hacker News Reader

I wonder if fuzzing with libFuzzer is less of an art? http://llvm.org/docs/LibFuzzer.html

Alex, an SDE from AWS S3, recently added LibFuzzer fuzzing to s2n: https://github.com/awslabs/s2n/pull/263 . The integration has been very simple, very impressive, and it has already found an issue we hadn't triggered with afl (a small memory leak in an error case). The minimization step is a big help in improving the branch coverage.

LibFuzzer runs in the same process as the code you want to test, right? Doesn't that mean you have to take special care to recover from errors? I mean, if it messes up the heap, for example, it would be possible but tricky to continue running. And continue is what you want, because then you save a process restart when exploring the parameter space (which makes it very fast).

Hi! Take a look at libFuzzerfication project at https://github.com/ouspg/libfuzzerfication

LibFuzzerfication project uses libFuzzer for fuzzing popular applications and libraries.

There are already some test stubs and mysamplelib stub is very good for learning purposes.

Reply on news.ycombinator.com