Software Testing

Exercise Question

What are different defect hypotheses relevant for fuzzing?

Defect hypothesis:
  1. Unexpected inputs may be problematic (random input generation)
  2. Inputs similar to legal inputs, e.g. semi-valid inputs, may be problematic (mutation-based input generation)
  3. Statements such as memcpy, strcpy, etc. are problematic (guided fuzzing)

Diskussion