[$] Fuzzing in Go

Post Syndicated from original https://lwn.net/Articles/829242/rss

Fuzzing is a testing
technique with randomized inputs that is used to find problematic edge
cases or security problems in code that accepts user input. Go package developers can use Dmitry Vyukov’s popular go-fuzz tool for fuzz testing
their code; it has found
hundreds of
obscure bugs in the Go standard library as well as in third-party
packages. However, this tool is not built in, and is not as simple to use
as it could be; to address this, Go team member Katie Hockman
recently published a draft
design
that proposes adding fuzz testing as a first-class feature of
the standard go test command.