Automate coverage-guided fuzz testing for C and C++ programs with libFuzzer.
npx skills add https://github.com/ayehiaa/my-travel-assistant --skill libfuzzer-ayehiaa
Please help me install this Agent Skill. Skill: libfuzzer Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/libfuzzer Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill libfuzzer-ayehiaa
It helps you uncover crashes and memory-safety bugs in C/C++ code by continuously generating inputs that maximize code coverage and reproduce failures with minimal effort.
LLVMFuzzerTestOneInput, validate inputs, and use FuzzedDataProvider for structured extraction.-fsanitize=fuzzer and optionally combining with ASan/UBSan, plus corpus/dictionary management to improve reach and speed.Use libfuzzer to fuzz your C/C++ harness and target by running a command like: "clang++ -fsanitize=fuzzer,address -g -O2 -U_FORTIFY_SOURCE harness.cc target.cc -o fuzz && mkdir corpus && ./fuzz corpus/".
High-intent search queries and answers about installing and using this skill.
You can start coverage-guided fuzzing by compiling your C++ code with -fsanitize=fuzzer,address, creating a harness with LLVMFuzzerTestOneInput, and executing the binary against a corpus directory.
A fuzzing harness uses LLVMFuzzerTestOneInput to feed data into target code, while FuzzedDataProvider extracts structured data from raw input to model valid API calls and test edge cases.
Yes, you can compile with AddressSanitizer and UBSan by adding the -fsanitize=address,undefined flags alongside -fsanitize=fuzzer to detect memory-safety defects and undefined behavior.
Corpus and dictionary management involves seeding the corpus directory with valid input samples and providing a dictionary file to help the fuzzer generate inputs that reach deeper parsing code paths.
The best way to reproduce a crash is to re-execute the fuzzer binary with the specific crash artifact file generated during the campaign, passing it directly as a command-line argument to the harness.
Yes, libFuzzer supports multi-core execution to parallelize long fuzzing campaigns, allowing you to maximize code coverage and surface crashes faster across available CPU cores.
dakshrawat298-gifGenerate libFuzzer workflows for coverage-guided fuzzing of Clang-compiled C/C++ projects.
kapilvirenahujaRun generated test files with a detected harness and emit a YAML pass/fail report.
Ramprasad4121Fuzz pure Ruby code and C extensions with coverage-guided libFuzzer.
ofelixdevGuide writing fuzzing harnesses across languages and fuzzing engines.