Fuzz Ruby code and C extensions with ASan/UBSan instrumentation.
npx skills add https://github.com/ayehiaa/my-travel-assistant --skill ruzy
Please help me install this Agent Skill. Skill: ruzy Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/ruzzy Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill ruzy
This Skill helps you detect crashes and memory corruption in Ruby code by running coverage-guided fuzzing with sanitizer instrumentation instead of relying on hand-written tests that miss edge cases.
Use Case Example: You want to harden a Ruby gem with a native extension; fuzz the extension’s parser by feeding arbitrary binary inputs until sanitizer reports a heap use-after-free.
Run the included toy harness with: set ASAN_OPTIONS to suitable values, then execute Ruzzy via LD_PRELOAD and run the toy entrypoint to confirm it can find a crash and write artifacts.
High-intent search queries and answers about installing and using this skill.
Coverage-guided fuzzing with ASan and UBSan sanitizers detects memory safety bugs by systematically exploring arbitrary inputs to surface heap overflows and undefined behavior that hand-written tests miss. This approach systematically explores inputs to find crashes faster than hand-written tests.
Coverage-guided fuzzing uses libFuzzer to systematically explore inputs while ASan and UBSan instrumentation surfaces memory safety bugs like heap overflows and undefined behavior in Ruby code. This approach systematically explores inputs to find crashes faster than hand-written tests.
You can fuzz pure Ruby logic using a tracer and harness pattern, and fuzz Ruby C extensions with a single harness that exercises native parsing. Both approaches require deterministic test_one_input harness logic that returns 0.
Ruby fuzzing requires building and installing ruzzy, setting appropriate ASAN_OPTIONS environment variables, and executing the fuzzing run via LD_PRELOAD to properly load the sanitizer instrumentation libraries.
Crashes may occur if ASAN_OPTIONS are not set to suitable values or if LD_PRELOAD is not configured correctly. Run the included toy harness first to confirm the setup can find a crash and write artifacts successfully.
SuperlendRun coverage-guided fuzz testing on Ruby applications and C extensions with Ruzzy.
Ramprasad4121Fuzz pure Ruby code and C extensions with coverage-guided libFuzzer.
elizaOSFuzz Ruby code and C extensions with Ruzzy and sanitizers.
keremtoker468-dotcomAutomates coverage-guided fuzz testing of Ruby code and C extensions with ASan/UBSan.
