Fuzzing is magic – Or how I found a panic in Rust's regex library

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by kibwen on Saturday April 01, 2017 @05:41PM (#14014335)

I'm really excited at encouraging a culture of fuzz testing in Rust. :) Can someone explain what's currently Linux-specific about cargo-fuzz? Is it to do with LibFuzzer itself?

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by amaranth on Saturday April 01, 2017 @06:36PM (#14014549)

The libFuzzer website doesn't cite any supported platforms or platform requirements so I think this might just be a matter of someone putting in the effort. The Chromium documentation (where libFuzzer comes from originally) does make it sound like it either takes effort to integrate with various sanitizers or (more likely) requires the infrastructure that the sanitizers do. None of those support Windows and seem to work best on amd64 Linux or, if you're lucky, amd64 macOS.

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by Manishearth on Saturday April 01, 2017 @07:34PM (#14014792)

libFuzzer (based on LLVM sanitizer instrumentation support) is Linux only.

IIRC the bits for OSX support are almost there, someone was trying this out before.

[ Parent | on HN ]