News for hackers. Stuff that matters.

A comment on Why CVE-2022-3602 was not detected by fuzz testing. Parent comment

Re:Why CVE-2022-3602 was not detected by fuzz testing by asveikau on Monday November 21, 2022 @11:31AM (#33694433)
It's worth noting that coverage can be a deceptive metric sometimes.

You can have coverage on code that divides - it won't tell you if you ever divide by zero.

You can have coverage on code that follows a pointer - it won't tell you if you ever pass a bad pointer.

[ Parent | on HN ]
Re:Why CVE-2022-3602 was not detected by fuzz testing by adql on Monday November 21, 2022 @11:40AM (#33694548)
yeah but there isn't even a try here
[ Parent | on HN ]
Re:Why CVE-2022-3602 was not detected by fuzz testing by asveikau on Monday November 21, 2022 @12:55PM (#33695603)
Not saying it isn't worth an attempt, just that the real meaning shouldn't be lost.
[ Parent | on HN ]