#fuzzing

Go ships a fuzzer in the standard toolchain. Write a fuzz target, seed a corpus, and turn every crasher into a permanent regression test.

A migration passed every check — then I saw the path it took: DROP TABLE; CREATE TABLE. Randomness doesn't find bugs, oracles do. What AI made cheap in dev-tool testing, and the one thing it didn't.

In late June I filed toon#322 against the reference TypeScript implementation of TOON, a...

Differential testing finds bugs that conformance suites structurally can't — here's how I did it for TOON, plus the ES2023 reviver trick that makes the number comparison honest.

Fuzzing for wolfSSL ![tech news cover](https://1.gravatar.com/avatar/a7adc0a54394159802410f6121d798a6c25d7018cb2a3f62d473ea5ce2f60858?s=96&d=identicon&...

Fuzzing Irssi with Perl Scripts TL;DR: Breaking tech news from Unnamed Source. What Happened 📰 Unnamed Source is reporting on this story. This i...

When I was the head of Microsoft's Edge security for the US market, we ran into an infrastructure...

This is a continuation of my last post on Bluetooth Service Discovery Protocol. Why fuss...

A technical deep-dive into uncovering subtle JIT miscomputations through a novel differential fuzzing approach that turns engines against themselves.

Smart Mutation: Using AI to Fortify JavaScript Engines JavaScript engines are the unsung...

Fuzz Testing Overview Fuzz testing, often called fuzzing, is a software testing...

What is Symbolic Execution? symbolic execution is a means of analyzing a program to...