introduction to fuzz in sqlite

tools

american fuzzy lop

forget the history

Google OSS Fuzz

It's for googlers

gcov

Branch coverage in SQLite is currently measured using gcov with the "-b" option. First the test program is compiled using options "-g -fprofile-arcs -ftest-coverage" and then the test program is run. Then "gcov -b" is run to generate a coverage report.

valgrind

The Valgrind distribution currently includes six production-quality tools:

1. a memory error detector
2. two thread error detectors
3. a cache and branch-prediction profiler
4. a call-graph generating cache
5. branch-prediction profiler
6. a heap profiler.

It also includes three experimental tools:

1. a stack/global array overrun detector
2. a second heap profiler that examines how heap blocks are used
3. a SimPoint basic block vector generator.