gosentry brings LibAFL-grade fuzzing to Go

Summary: Trail of Bits built gosentry, a fuzzing-oriented fork of the Go toolchain that runs LibAFL by default under the existing go test -fuzz interface, so existing Go fuzz harnesses need no rewriting. It adds native struct fuzzing, grammar-based fuzzing via Nautilus, and detection of integer overflows, data races, goroutine leaks, and timeouts, and the team says grammar-based differential fuzzing campaigns with it found bugs it disclosed to Optimism and Revm.
What you should know: The team states that the bugs it found in Optimism and Revm would not have been easy to find with Go's native fuzzer, which means code already covered by vanilla Go fuzzing may still be carrying defects that only a stronger engine surfaces.

Read the original at Trail of Bits Blog ↗