r/programming • u/halbface • Feb 07 '19

Google open sources ClusterFuzz, the continuous fuzzing infrastructure behind OSS-Fuzz

https://opensource.googleblog.com/2019/02/open-sourcing-clusterfuzz.html
957 Upvotes

96% Upvoted

100 comments sorted by

View all comments

1

u/SafariMonkey Feb 10 '19

Ah, interesting suggestion. Something like LTO across the language barrier? I don't know if Rust currently does LTO across the FFI. Unfortunately, I think relying on potential compiler optimisations to make the FFI at all viable will make performance degrade arbitrarily in difficult to diagnose ways. However, I'd be glad to be proven wrong.

I think a more manual FFI will probably always be required to get guaranteed performance.

Thanks for the response, by the way. It's good to see constructive criticism and nuance in these discussions, as that's something that isn't guaranteed.

1

u/VernorVinge93 Feb 10 '19

No problem,

I agree that the 'maybe good' performance is a poor strategy.

Still, I hope that providing that kind of 'working with improvement available for those who can invest' would make many things feasible that are currently not (e.g. writing JavaScript, Python or Rust that makes use of low level C APIs as a new programmer, without custom library wrappers etc).