go-fuzz
go-fuzz copied to clipboard
fuzzing dictionary
Both libfuzzer and afl support dictionaries for interesting keywords to use when fuzzing. It would be nice if go-fuzz had similar capabilities.
Where does static analysis and comparison interception fail? The more manual work we require the worse.
I saw this mentioned in https://www.youtube.com/watch?v=n6kP-CWO_0Q with regards to libxml. I had no specific failing use case that this would solve.
I find that prepopulating the corpus with inputs from the tests is enough for go-fuzz to get to good results in a matter of minutes.