crash-triage-reference

Overview

Pure-reference catalog for working with fuzzer crash artifacts produced by libFuzzer, AFL++, or cargo-fuzz campaigns using clang sanitisers. Covers reading crash output from ASan, UBSan, and MSan; distinguishing LIKELY-EXPLOITABLE from BENIGN findings; collapsing duplicates by stack-hash; and minimizing reproducers. The "Bulk triage workflow" section applies these steps across a full artifact directory and ends in a BLOCK / PASS verdict. For sanitiser build flags and compatibility, see coverage-guided-fuzzing references/sanitizer-integration.md.

When to use