Custom mutators
Opened this issue · 0 comments
delcypher commented
Currently we just use LibFuzzer's built in mutation strategy. This is likely sub-optimal for several reasons.
- LibFuzzer is unware of the structure of the data. We know where the free variables are what their sort is.
- We could implement custom mutators based on the sort of a free variable. For example we could have IEEE-754 specific mutators that try flipping the sign, adjusting the exponent, adjusting the significand.