Post #1940879
2026-04-30 15:42 UTC
@mitchellh I've never really done fuzz testing so I don't understand. I know the concept is "random inputs", but what are the test cases like? What's the acceptance criteria? Or is it just looking for crashes/hangs?
Replies (1)
-
@mitchellh@hachyderm.io 2026-04-30 17:03
@audiodude It varies, but usually crashes/hangs. The input is "random" but there's a really deep body of research on finding "interesting" inputs and avoiding non-interesting ones. Usually paired with tracing so inputs that exercise the same execution paths are less interesting than inputs that exercise new ones. Deep hole of studying here: https://github.com/AFLplusplus/AFLplusplus