ScienceGoogle Project Zero4 months ago
On the Effectiveness of Mutational Grammar Fuzzing
11 min read
Mutational grammar fuzzing maintains sample structure during mutations. Coverage-guided grammar fuzzing saves samples triggering new code coverage. The technique found XSLT and JIT engine bugs. Coverage is a poor bug-finding measure, especially for language fuzzing where bugs require specific function call orders.
Level
Hype check
Tap to vote and see what everyone thinks.