A Year in the Life of a Compiler Fuzzing Campaign

Summary: Trail of Bits reports that its fuzzing campaign against the Solidity compiler, begun in February 2020, has submitted 74 reports, of which 67 were confirmed as bugs and 66 fixed, with 21 of those submitted since the previous December. The team also fuzzed other compilers, including Fe (31 issues, 14 confirmed bugs, ten fixed), the Move language compiler (14 bugs reported, all confirmed, 11 fixed), and Zig (two confirmed bugs), for a total of 88 fixed bugs plus 14 confirmed but unfixed.
Why it matters: The campaign kept finding new execution paths roughly every one to two hours even after 30 or more days of continuous fuzzing, and some reported bugs surfaced only after a month of running - so a fuzzing effort that looks saturated may still be finding what other campaigns miss.

Read the original at Trail of Bits Blog ↗