Post #1010530
2026-04-08 03:00 UTC
My well-tested CSV parser had 100% line and branch coverage and a 100% mutation score. Surely no bugs left, right?
Wrong. Fuzz testing found one almost instantly.
In my new article, I explore fuzz testing for PHP using @nikic's PHP-Fuzzer and also compare fuzzing with property-based testing:
https://phpunit.expert/articles/security-through-chaos.html?ref=mastodon
Replies (1)
-
@chaos0815@phpc.social 2026-04-08 07:21
@sebastian@phpc.social @nikic@mastodon.social Just when I thought I had it all covered after having introduced infection, here you come with something new...