Repository files navigation

$ cargo install cargo-fuzz

Note:libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64,and only on Unix-like operating systems (not Windows). This also needs a nightly compiler since it uses someunstable command-line flags. You'll also need a C++ compiler with C++11 support.

Initialize acargo fuzz project for your crate!

fuzz directory can be either a part of an existing workspace (default)or use an independent workspace. If latter is desired, you can usecargo fuzz init --fuzzing-workspace=true.

Create a new fuzzing target!

Run a fuzzing target and find bugs!

Print thestd::fmt::Debug output for a test case. Useful when your fuzz targettakes anArbitrary input!

Found a failing input? Minify it to the smallest input that causes that failurefor easier debugging!

Minify your corpus of input files!

Generate coverage information on the fuzzed program!

Documentation can be found in theRust FuzzBook.

You can also always find the full command-line options that are available with--help:

$ cargo fuzz --help

The trophy case has a list of bugsfound bycargo fuzz (and others). Didcargo fuzz and libFuzzer find a bugfor you? Add it to the trophy case!

cargo-fuzz is distributed under the terms of both the MIT license and theApache License (Version 2.0).

SeeLICENSE-APACHE andLICENSE-MIT fordetails.