libfuzzer

LLVM-native in-process fuzzer using LLVMFuzzerTestOneInput entrypoints.

Quick Start

# Minimal target
# extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)

# Build with libFuzzer + ASAN
clang++ -g -O1 -fsanitize=fuzzer,address fuzz_target.cc -o fuzz_target

# Run
./fuzz_target corpus/

Operator Flow