SnapFuzz: making network-server fuzzing fast
Fuzzing network servers is slow for boring reasons: TCP handshakes, sleeps, file I/O and teardown dominate each run. SnapFuzz snapshots the server once it's initialised, swaps sockets and timers for fast in-memory equivalents, and restores from the snapshot each iteration — and reports big throughput gains on servers like DNS and FTP. If your resolver-fuzzing campaign is execution-bound, this is the harness idea to borrow.
Open question I keep coming back to: how much of that speedup survives once you actually need faithful timing, for a bug that only triggers under a real, slow handshake?
Paper: ISSTA 2022
318 views