mc-imperial/jfs

Custom mutators

Opened this issue · 0 comments

Currently we just use LibFuzzer's built in mutation strategy. This is likely sub-optimal for several reasons.

  • LibFuzzer is unware of the structure of the data. We know where the free variables are what their sort is.
  • We could implement custom mutators based on the sort of a free variable. For example we could have IEEE-754 specific mutators that try flipping the sign, adjusting the exponent, adjusting the significand.