atheris

To fuzz Python C extensions, you define a test_one_input function and run a fuzzing harness to automatically uncover memory leaks, crashes, and undefined behavior using coverage guidance and sanitizers.

Coverage-guided fuzzing for Python functions is an automated security testing technique that mutates inputs based on code coverage to discover hidden bugs, crashes, and undefined behavior in native Python modules.

Yes, you can use AddressSanitizer support to perform memory safety testing on Python modules, effectively detecting memory corruption and validating the robustness of native C extensions.

You set up a fuzzing harness by defining a test_one_input function that processes mutated inputs, allowing the fuzzer to automatically identify hidden security flaws and stability issues before deployment.

Atheris works with both pure Python functions and custom C modules, providing comprehensive fuzz testing to uncover memory bugs and vulnerabilities across native Python extensions.

Fuzzing can automatically discover memory leaks, crashes, and undefined behavior in Python and C extensions, making it suitable for security auditing and robustness validation of native modules.