You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
as we discussed yesterday on my talk about fuzzing in Python it may be good if Atheris extracted all string literals to use them later during mutating of an input.
Apparently Atheris currently extract literals that are directly compared with a variable like this: if x == "abc" but it doesn't extract literals that are used in other ways like: if x.startswith("some string".
On the other hand, one downside to extracting all string literals are logging string formatting messages which may not be that useful for fuzzing. But I am not sure how big of a problem that is, and, maybe there should be an option to inspect the extracted strings and influence them.
The text was updated successfully, but these errors were encountered:
Hi,
as we discussed yesterday on my talk about fuzzing in Python it may be good if Atheris extracted all string literals to use them later during mutating of an input.
Apparently Atheris currently extract literals that are directly compared with a variable like this:
if x == "abc"
but it doesn't extract literals that are used in other ways like:if x.startswith("some string"
.On the other hand, one downside to extracting all string literals are logging string formatting messages which may not be that useful for fuzzing. But I am not sure how big of a problem that is, and, maybe there should be an option to inspect the extracted strings and influence them.
The text was updated successfully, but these errors were encountered: