
12/3/2020 · Yevgeny Pats
What this post added
This post details how to use `cargo-fuzz` for fuzzing Rust code, explaining its relationship with libFuzzer and its coverage-guided algorithm. It provides a step-by-step guide to building and running a fuzz target using a sample Rust function with an off-by-one bug, demonstrating how the fuzzer finds the bug and generates a crash artifact. It also outlines how to integrate `cargo-fuzz` into GitLab CI/CD pipelines using the `.gitlab-ci.yml` file and the `gitlab-cov-fuzz` CLI for both blocking pipeline execution and long-running asynchronous fuzzing sessions.