Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I had pretty good results fuzzing SQLite back in the day:

https://lcamtuf.blogspot.com/2015/04/finding-bugs-in-sqlite-...

I think they eventually incorporated AFL into their continuous testing and squashed several dozen bugs. OSS Fuzz scales it up, but yup - the bottom line is that you might think you have 100% test coverage, but you really still need to fuzz =)



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: