Finding bugs you didn't think to test for

Finding bugs you didn't think to test for firezone.dev

How Firezone combines sans-IO design, deterministic simulation testing and coverage-guided fuzzing into one test harness for its WireGuard data plane.

8 points•wh33zle•6 days ago•2 comments•

#test #didnt #finding #bugs #finding bugs #didnt think #combines #firezone

2 comments

mabliang6 days ago

Does coverage guidance actually help much here, or does most of the value come from having a good generator and reference model?

wh33zle6 days ago

Coverage is just the feedback loop. If you don't have a good generator, feedback that certain areas are uncovered doesn't really help. But without coverage, the generator doesn't really explore deeper states.

Under the hood, the fuzzer actually works with _features_, not source code coverage and there are ways in explicitly giving the fuzzer additional feedback. Some early data suggests that this is very effevtive.

Read the full thread on Hacker News →

2 comments

Related stories