Eric Hennenfent

Summary: Trail of Bits released Manticore 0.3.3, adding support for symbolically executing WebAssembly binaries so the engine can explore all reachable states in a WASM program and derive the concrete inputs that trigger them. Earlier releases included Manticore 0.3.0, which added fast-forwarding through concrete execution, support for Linux binaries statically compiled for AArch64, and an interface for selectively solving for interesting test cases, and Sienna Locomotive, an open-source Windows fuzzer aimed at developers with limited security expertise.
Why it matters: WASM runs code at near-native speed inside the browser, and a symbolic execution engine that can enumerate every reachable state and the inputs that reach them changes what a reviewer can prove about that code before it ships.

Read the original at Trail of Bits Blog ↗