Why CVE-2022-3602 was not detected by fuzz testing

Re:Why CVE-2022-3602 was not detected by fuzz testing by fisf on Monday November 21, 2022 @12:07PM (#33694945)

I am not buying it.

Writing unit tests for c/c++ is trivial. There are perfectly fine test frameworks, used by developers every day, integrated in any major IDE or runnable as one-liner from the command line.

This is absolutely a cultural problem.

[ Parent | on HN ]

Re:Why CVE-2022-3602 was not detected by fuzz testing by edgyquant on Tuesday November 22, 2022 @12:43AM (#33702454)

In modern languages you either have built in testing or it’s a single package install away. It is nowhere near this simple with C or C++

[ Parent | on HN ]