Fuzzing is magic – Or how I found a panic in Rust's regex library

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by kibwen on Saturday April 01, 2017 @05:53PM (#14014373)

Worth noting that there's also an implementation of QuickCheck available for Rust (by none other than burntsushi, the author of the regex library in the OP): https://github.com/BurntSushi/quickcheck

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by im_down_w_otp on Saturday April 01, 2017 @07:22PM (#14014740)

We've recently started testing C code via Rust QuickCheck.

In addition to the relatively clean Rust -> C interface it's very nice to have higher degree of compile-time assurance of the correctness of the property model itself. As the models become non-trivial it becomes increasingly difficult to build them reliably in C itself.

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by adrianN on Sunday April 02, 2017 @01:37AM (#14015971)

Do you have more information about that? Maybe a blog post?

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by im_down_w_otp on Sunday April 02, 2017 @02:59AM (#14016224)

Not at the moment, but almost certainly at some point in the relatively near future.

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by lomnakkus on Saturday April 01, 2017 @06:01PM (#14014411)

Oh, nice!

[ Parent | on HN ]

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by burntsushi on Saturday April 01, 2017 @06:31PM (#14014524)

Incidentally, QuickCheck is also used on the regex parser.

[ Parent | on HN ]