harness-writing

To write an effective fuzzing harness, structure your target function to accept arbitrary byte arrays and pass them to the parsing logic. This Skill provides design patterns for handling integers, strings, and complex structures to maximize code coverage and bug detection.

Structure-aware fuzzing generates valid structured data instead of random bytes to exercise complex parsing logic deeply. You need it when targeting functions requiring specific input formats, utilizing techniques like the arbitrary crate or FuzzedDataProvider for data extraction.

Yes, it provides tool-specific guidance for Rust and Go environments. It covers using cargo-fuzz and the arbitrary crate for Rust, along with go-fuzz, ensuring you can create effective harnesses across these programming languages.

The best way to extract multiple data types is using FuzzedDataProvider or structure-aware fuzzing techniques. These methods allow structured data extraction from a single input stream, enabling interleaved fuzzing to test complex logic paths effectively.

Your fuzzing harness may not trigger deeper branches due to anti-patterns like rejecting invalid inputs too early. This Skill provides troubleshooting tips and structure-aware fuzzing techniques to bypass input validation and increase code coverage.

Yes, you can use this Skill to create a minimal C++ fuzzing harness for libFuzzer. It includes tool-specific instructions for libFuzzer and AFL++, guiding you through the quick start process to effectively exercise your target code.