pythonfuzz
pythonfuzz copied to clipboard
coverage guided fuzz testing for python
I've found a lot of unhandled exceptions and timeouts in mutagen by fuzzing it with PythonFuzz.
Running the example given on the README gives me roughly the following output: ``` python3 example_application/fuzzing_tests/greeter_fuzzing.py #0 READ units: 0 Traceback (most recent call last): File "example_application/fuzzing_tests/greeter_fuzzing.py", line 18, in...
This yields a couple of percent in performances, by bypassing: - a check to see if the connection is open - a check to see if the connection is writeable/readable...
It would be great to mimic libfuzzer's [-minimize_crash]( https://releases.llvm.org/5.0.0/docs/LibFuzzer.html ) option in pythonfuzz.
It would be nice to have an option like libfuzzer's [`-jobs`]( https://releases.llvm.org/5.0.0/docs/LibFuzzer.html ) one, to be able to run several instances of the same fuzzer in parallel without having a...
While fuzzing some python stuff, I've found several heap-corruption issues. Unfortunately, since the whole Python thingy is crashing in a weird way, the crashing input isn't saved, and this is...
The current `_rand_exp` is currently looking *suboptimal*: ```python # Exp2 generates n with probability 1/2^(n+1). @staticmethod def _rand_exp(): rand_bin = bin(int(random.random() * 2**32-1))[2:] rand_bin = '0'*(32 - len(rand_bin)) + rand_bin...
The current behavior is to stop on the first crash. A feature that allows the user to capture all crashes could be useful. A possible workaround is to catch all...