dvyukov/go-fuzz
Go Fuzz
go-fuzz is a coverage-guided randomized testing tool for identifying crashes and logic bugs in Go code. It consists of a fuzzer that evolves random inputs based on code execution paths, an instrumentation tool that produces binaries for tracking coverage, and a seed corpus manager.
The tool utilizes compile-time binary instrumentation to monitor branch coverage and employs a feedback-driven mutation loop to prioritize inputs that reach new sections of the codebase. It includes capabilities for comparative differential testing to identify logic errors by executing different implementations of the same logic with the same randomized input.
The system handles the generation of randomized inputs to stress test complex format parsers and provides utilities for the minimization and deduplication of seed corpora. It can export instrumented archives for execution within a fuzzing engine on Linux.
Features
- Coverage-Guided Fuzzing - A coverage-guided randomized testing tool specifically designed to find crashes and memory leaks in Go code.
- Go Binary Instrumentation - A compiler-level utility that produces instrumented binaries for tracking code coverage during tests.
- Binary Instrumentation - Instruments Go binaries to enable the tracking of branch coverage during randomized testing.
- Coverage-Tracking Insertions - Injects coverage-tracking code into the target binary at compile time to monitor execution paths.
- Fuzzing Mutation Loops - Employs a feedback-driven mutation loop to iteratively modify inputs based on coverage data.
- Coverage-Guided Mutation - Uses code coverage metrics as a feedback loop to mutate and evolve inputs for deeper exploration.
- Fuzzing Instrumentation - Generates instrumented binaries from Go packages to enable coverage-guided random testing.
- Go Fuzzing Tools - Provides a complete coverage-guided randomized testing suite specifically for Go code.
- Fuzzing Input Generators - Provides a wide variety of randomized data inputs to stress test complex format parsers and uncover edge cases.
- Corpus Management - Manages and optimizes seed input corpora to increase the efficiency of the fuzzing process.
- Corpus Minimization - Includes utilities to minimize seed input collections, keeping only those that trigger unique execution paths.
- Differential Testing - Implements differential testing to find logic bugs by comparing multiple implementations of the same logic.
- General Bug Detection - Identifies logic bugs in Go programs through differential testing and consistency verification.
- Parser Fuzzing - Provides capabilities for stress testing complex format parsers with randomized inputs.
- Fuzzing - Coverage-guided fuzzing tool for testing Go language packages and libraries.
- Fuzzing Frameworks - Coverage-guided testing tool for Go packages.
- Fuzzing Tools - Randomized testing system.
- Testing and QA - Randomized testing system.
- Testing and Quality Assurance - Randomized testing system.
- Testing Frameworks - Randomized testing tool.
