domains / families / security / harness-writing

harness-writing

authentic

Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target API, generating structured inputs, avoiding non-determinism and false crashes, and deciding what to fuzz together. Use when writing a first LLVMFuzzerTestOneInput or fuzz_target! harness, when a campaign finds nothing or reports crashes that will not reproduce, or when the target API needs structured rather than raw input.

When to use

• Writing a first LLVMFuzzerTestOneInput or fuzz_target! harness
• Improving harnesses when campaigns find nothing
• Fixing crashes that will not reproduce
• Mapping raw bytes onto a target API
• Generating structured inputs
• Avoiding non-determinism and false crashes
• Deciding what to fuzz together

When not to use

• Using existing well-tested harnesses from your project
• Using automatic harness generation that meets your needs
• Targets that already have comprehensive fuzzing infrastructure

Skill page

Source