fuzz lab

watch a real bug get found.

this is not a video. a coverage-guided fuzzer is running in your browser right now, mutating inputs and feeding them to a small binary parser with real memory-safety bugs. every number below is measured, and every crash is one the fuzzer actually reached on its own.

coverage
idle
controls
executions
0
exec / sec
0
corpus
0
edges covered
0
unique crashes
0
status
idle
crashes

what the swarm found

nothing yet. press start and give it a few seconds.
software under test

the buggy parser

a tag-length-value parser. the bounds-checked read models what a sanitizer catches on native c.

loading source…