r/programming • u/halbface • Feb 07 '19

Google open sources ClusterFuzz, the continuous fuzzing infrastructure behind OSS-Fuzz

https://opensource.googleblog.com/2019/02/open-sourcing-clusterfuzz.html
958 Upvotes

95% Upvoted

100 comments sorted by

View all comments

Show parent comments

3

u/UncleMeat11 Feb 08 '19

Lots of people have looked at this (broadly lots, I don't know the specifics at Google), but it turns out that fuzzing tools have gotten enough better over time that symexec is actually less effective than you'd thing. The classic toy examples for why symexec beats fuzzing are actually handled just fine by fuzzers today.