Extending Ruzzy with LibAFL
LibAFL is all the rage in the fuzzing community these days, especially with LLVM’s libFuzzer being placed in maintenance mode. Written in Rust, LibAFL claims improved performance, modularity, state-of-the-art fuzzing techniques, and libFuzzer compatibility. For these reasons, I set out to add LibAFL support to Ruzzy, our coverage-guided fuzzer for pure Ruby code and Rub...
The integration of LibAFL into Ruzzy reflects a broader trend in software security: the shift toward more modular, performant, and actively maintained fuzzing tools. The technical challenges encountered—such as linker constraints and coverage initialization—highlight the complexities of modern fuzzing engines, particularly when interfacing with interpreted languages like Ruby. The reliance on workarounds, like using LLVM’s linker to bypass GNU’s restrictions, underscores the tension between inno...