Automate coverage-guided fuzzing of Ruby applications and C extensions with libFuzzer.
npx skills add https://github.com/amano--/call-center --skill ruzzy-amano
Please help me install this Agent Skill. Skill: ruzzy Source: https://github.com/amano--/call-center/tree/main/.gemini/antigravity/skills/trailofbits-security/ruzzy Command: npx skills add https://github.com/amano--/call-center --skill ruzzy-amano
This Skill helps developers find bugs and security vulnerabilities in Ruby code, including native C extensions, by automatically generating diverse inputs to test code paths.
Use the ruzzy skill to fuzz the provided Ruby harness script.
High-intent search queries and answers about installing and using this skill.
Fuzz Ruby C extensions for memory corruption by integrating libFuzzer to automatically generate targeted inputs and detect bugs. This approach uses coverage-guided fuzzing to explore new execution paths and identify vulnerabilities.
Coverage-guided fuzzing in Ruby instruments code to prioritize generated inputs that trigger new execution paths. This mechanism effectively uncovers hidden bugs by systematically exercising complex code branches within the application.
You need AddressSanitizer and UndefinedBehaviorSanitizer to fuzz Ruby code when detecting memory corruption and undefined behavior. These sanitizers require specific build flags and environment variable configurations to function properly.
You can use libFuzzer integration to find security vulnerabilities in Ruby gems by automatically generating diverse inputs to test code paths. This process exposes memory leaks or buffer overflows before releasing the gem.
Set up a Ruby harness script for fuzzing by providing it to the automated fuzzing process, which then uses libFuzzer to generate targeted inputs. This harness defines the specific code entry points to test for bugs.
Limitations of fuzzing Ruby native extensions include the strict requirement for specific build flags and environment variable configurations to enable sanitizer support. Without this precise setup, detection of memory corruption fails.
andrescardonas7Fuzz Ruby code and C extensions with libFuzzer coverage guidance.
manuelbrandner85Fuzz Ruby applications and C extensions with libFuzzer instrumentation.
SuperlendRun coverage-guided fuzzing for C/C++ projects with LLVM's libFuzzer.
hung-phanGenerates and validates code behavior across multiple scenarios using property-based testing.
