skills.rest
Superlend
SuperlendOFFICIAL
Explore all skills by this author →
Website𝕏@SuperlendHQGitHub

libfuzzer

Run coverage-guided fuzzing for C/C++ projects with LLVM's libFuzzer.

Updated Jul 10, 2025
Search Tags:#C/C++#fuzzing#harness#coverage-guided#LLVM#Clang#libFuzzer
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill libfuzzer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: libfuzzer
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/testing-handbook-skills/skills/libfuzzer
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill libfuzzer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill streamlines discovering memory corruption and logic bugs in C/C++ projects by using an in-process, coverage-guided fuzzer.

Core Features & Use Cases

  • In-process, coverage-guided fuzzing for C/C++ code
  • Simple harness integration with Clang/LLVM
  • Quick setup for single-project fuzzing and CI integration

Quick Start

Install LLVM/Clang and libFuzzer, then compile your harness and target with fuzzing enabled: clang++ -fsanitize=fuzzer -g -O2 harness.cpp target.cpp -o fuzz Run fuzzing with a corpus: ./fuzz corpus/

Frequently Asked Questions about libfuzzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate coverage-guided fuzzing for C/C++ projects?▼

Coverage-guided fuzzing for C/C++ projects is automated by compiling a fuzzing harness and target code with Clang's -fsanitize=fuzzer flag. This enables in-process execution to automatically uncover memory corruption and logic bugs.

What is a fuzzing harness and how does it work with Clang?▼

A fuzzing harness is a C/C++ file implementing the LLVMFuzzerTestOneInput function. When compiled with Clang using -fsanitize=fuzzer, it feeds generated inputs directly into your target code paths for in-process execution.

Do I need an LLVM toolchain to run libFuzzer?▼

Yes, running libFuzzer requires an LLVM/Clang-compatible toolchain. You must use Clang to compile your C/C++ project with the -fsanitize=fuzzer flag to enable deterministic execution and coverage instrumentation.

How can I integrate fuzzing into a CI pipeline for C++ code?▼

Integrate C++ fuzzing into CI by compiling your harness and target with -fsanitize=fuzzer during build commands. Execute the generated binary against a stored corpus directory to validate multi-module code paths automatically.

What is the best way to find memory bugs in C/C++ using fuzzing?▼

The best way to find memory bugs in C/C++ is in-process, coverage-guided fuzzing using LLVM libFuzzer. Compile with Clang, enable -fsanitize=fuzzer alongside optional sanitizers, and run the binary against a corpus.

Why does my C++ fuzzing harness require specific Clang flags?▼

Your C++ fuzzing harness requires Clang flags like -fsanitize=fuzzer to inject coverage instrumentation and link the libFuzzer runtime. Without these flags, the compiler cannot generate a binary capable of in-process, coverage-guided execution.

Related Skills

Explore More Software Engineering Skills→
trailofbitstrailofbits
6.5k

libfuzzer

Detects C++ and other unprocessable-language bugs in your code.

Official
Intermediate
SnailSploitSnailSploit
2.9k

fuzzing-course

Teach coverage-guided fuzzing with AFL++ and libFuzzer for vulnerability discovery.

Community
Advanced
amano--amano--

ruzzy

Automate coverage-guided fuzzing of Ruby applications and C extensions with libFuzzer.

Community
Advanced
SuperlendSuperlend

coverage-analysis

Analyze code coverage from fuzzing campaigns and generate reports with LLVM tools.

Official
Intermediate