secure-fuzz-testing

Secure Fuzz Testing

English | Bahasa Indonesia

---

English

Orchestration & Integration

Connects and orchestrates with relevant domain skills like brainstorming, zero-to-prod-orchestrator, and project-context-mapper to ensure cohesive execution.

Description

Expert-level guidance for writing, running, and integrating coverage-guided fuzz tests (fuzzing) to identify security vulnerabilities, memory leaks, and input-validation issues in software applications. This skill covers writing fuzz targets in Python, Rust, and Go, configuring compilers with sanitizers (ASan, MSan, UBSan), and setting up automated CI/CD security pipelines.

Trigger Conditions

• Use when designing or reviewing data parsers, serialization/deserialization logic, or file formats.
• Use when writing libraries that process untrusted network input or binary data streams.
• Use when integrating automated security testing into a DevSecOps pipeline (CI/CD).
• Use when troubleshooting complex memory bugs, edge-case crashes, or unhandled exceptions.

Writing Fuzz Targets

Coverage-guided fuzzers need a target function that accepts a stream of bytes and processes it.

1. Python Fuzzing (Atheris)

Atheris is a coverage-guided fuzzer for Python. It can fuzz Python code and native extensions:

import sys
import atheris

with atheris.instrument_imports():
    import our_parser  # Import target module inside instrument_imports

def TestOneInput(data):
    if len(data) < 4:
        return
    try:
        # Decode and parse the byte data
        text = data.decode("utf-8", errors="ignore")
        our_parser.parse_config(text)
    except our_parser.ParseException:
        # Expected exceptions should be caught to avoid false positives
        pass

atheris.Setup(sys.argv, TestOneInput)
atheris.Fuzz()

2. Rust Fuzzing (cargo-fuzz & libFuzzer)

Rust has first-class fuzzing support via cargo-fuzz which wraps libFuzzer:

#![no_main]
use libfuzzer_sys::fuzz_target;

fuzz_target!(|data: &[u8]| {
    if let Ok(input_str) = std::str::from_utf8(data) {
        let _ = our_crate::parse_config(input_str);
    }
});

• Run Fuzzer: Execute cargo +nightly fuzz run <target_name>.