Fuzzing

Purpose

Guide agents through setting up and running coverage-guided fuzz testing: libFuzzer (in-process) and AFL++ (fork-based), with sanitizer integration and CI pipeline setup.

Triggers

• "How do I fuzz-test my parser/deserializer?"
• "What is a fuzz target / how do I write one?"
• "How do I set up libFuzzer?"
• "How do I use AFL++ on my program?"
• "How do I run fuzzing in CI?"
• "Fuzzer found a crash — how do I reproduce it?"

Workflow

1. Write a fuzz target (libFuzzer)