Skip to content

Verification · Testing · Fuzzing

Corpus regression

Replay the saved corpus and crash cases in normal CI.

How to build it

Commit the seed corpus and every crash case the fuzzer found.
Replay the corpus in the normal test run without starting new fuzzing runs.
Fail the build when a saved case crashes again.

Signals in a repository

A corpus or crashes directory next to the fuzz target.
A CI step that replays the files in the corpus directory.
Regression test names that refer to a fuzzing crash case.

In practice

6 repositories run a tool for this check in the scanned set.

cargo-fuzz · 6 repos

Examples

astral-sh/ruff · cargo-fuzz
```
cargo fuzz build -s none
```
tokio-rs/tokio · cargo-fuzz
```
cargo fuzz check --all-features
```