Fuzzing Challenges and Strategies

This chapter explores the complexities and limitations of fuzzing in software testing, particularly through the lens of an integer overflow vulnerability in an AV1 decoder project. It discusses the effectiveness of tools like UBSAN and ASAN, while also highlighting the challenges posed by code coverage metrics and existing fuzzing techniques such as OSS Fuzz. The conversation emphasizes the need for innovative fuzzing approaches to uncover overlooked vulnerabilities in complex codebases.

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app