Continuously fuzzing Python C extensions

By Matt Schwager

Deserializing, decoding, and processing untrusted input are telltale signs that your project would benefit from fuzzing. Yes, even Python projects. Fuzzing helps reduce bugs in high-assurance software developed in all programming languages. Fortunately for the Python ecosystem, Google has released Atheris, a coverage-guided fuzzer for both pure Python code and Python C extensions. When it comes to Python projects, Atheris is really the only game in town if you’re looking for a mature fuzzer. Fuzzing pure …

assurance assurance software bugs code decoding ecosystem extensions fuzzer fuzzing google high input languages matt programming project projects python software untrusted yes