Hacker News new | ask | show | jobs
by stevekemp 3650 days ago
> AFL can fuzz ruby by running ruby on arbitrary inputs.

If you're brave (consider "system rm -rf /home") this is worth doing. I recently ran such a fuzzing test against GNU Awk.

Unfortunately the bugs I reported are still unfixed, but it didn't take too long to find them, and it was a good learning exercise:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816271

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816277

I'm sure passing "random" input to Perl, Python, Ruby, and many other languages will lead to similar results.

1 comments

i've actually used AFL to find some input parsing bugs in Perl, Python, and Ruby.

Perl was the team who fixed them the fastest.

none of the teams (rightly) considered these particularly high impact.