ruzzy

Fuzz Ruby C extensions for memory corruption by using a coverage-guided fuzzer that integrates AddressSanitizer to detect buffer overflows and leaks during automated test input generation.

Coverage-guided fuzzing for Ruby code is an automated testing technique that monitors execution paths to generate targeted inputs, discovering undefined behavior and memory bugs in pure Ruby scripts and C extensions.

AddressSanitizer and UndefinedBehaviorSanitizer integrate directly with Ruby fuzzing to detect memory corruption and undefined behavior, targeting vulnerabilities in both pure Ruby code and native C extensions.

Find undefined behavior in Ruby gems handling user-uploaded data by fuzzing the parsing logic with UndefinedBehaviorSanitizer integration, identifying potential memory leaks and buffer overflows before exploitation.

Fuzzing pure Ruby code uses a tracer script approach for coverage guidance, while direct fuzzing of C extensions requires sanitizer integration to detect memory corruption and undefined behavior.

A Ruby fuzzer automates input generation using coverage guidance to explore edge cases that standard unit tests miss, actively detecting memory corruption and undefined behavior via sanitizer integration.