Christian Presa Schnell

Summary: During a winternship at Trail of Bits, Christian Presa Schnell used findings from recent Go audits to make several improvements to go-fuzz, a coverage-based fuzzer for projects written in Go. The work focused on three enhancements aimed at improving the effectiveness of Go fuzzing campaigns and the experience for users, and included contributing to fixing type alias issues.
What you should know: The improvements rest on findings from recent Go audits, meaning known weaknesses in Go code are being fed back into the fuzzer that is supposed to catch them - a reminder that fuzzing coverage is only as good as the audit findings behind it.

Read the original at Trail of Bits Blog ↗