prog-fuzz
prog-fuzz copied to clipboard
Applicability to dynamic languages?
Last Thanksgiving, I had an idea to use libFuzzer as an input stream to a grammar to fuzz JS engines. Ultimately I didn't have a lot to show for it. There's a lot of success in fuzzing JS engines, but no success with coverage guided fuzzing as far as I'm aware.
I'm curious if you think the approach in prog-fuzz is applicable to dynamic languages, and if yes if you'd be interested in attempting to get one of the major engines going with prog-fuzz.