Hacker News new | past | comments | ask | show | jobs | submit login
GrayC: Greybox Fuzzing of Compilers and Analysers for C [pdf] (ic.ac.uk)
42 points by luu on June 11, 2023 | hide | past | favorite | 2 comments



This is a better link:

https://srg.doc.ic.ac.uk/projects/grayc/

SRG is the group that maintains KLEE, the symbolic execution engine https://klee.github.io/


protobuf clang fuzzer is some related work [1][2]

> transforming fuzzed programs so that they produce meaningful output, allowing differential testing to be used as a test oracle, and paving the way for fuzzer-generated programs to be integrated into compiler and code analyser regression test suites.

But this ^^ seems particularly novel! Sadly, fuzzers like the protobuf one often produce compiler crashes due to failed assertions that are difficult to prioritize over other compiler features/fixes that are more obviously relevant. But if it can find a miscompile, that's a real big deal IMO.

[1] https://llvm.org/devmtg/2017-10/slides/Serebryany-Structure-...

[2] https://youtu.be/U60hC16HEDY




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: