FuSeBMC v4: Smart Seed Generation for Hybrid Fuzzing

Abstract FuSeBMC is a test generator for finding security vulnerabilities in C programs. In Test-Comp 2021, we described previous version that incrementally injected labels to guide Bounded Model Checking (BMC) and Evolutionary Fuzzing engines produce cases code coverage bug finding. This paper introduces an improved of utilizes both smart seeds. First, the run with short time limit on lightly instrumented program The BMC engine particularly useful producing seeds can pass through complex mathematical guards. Then, runs its extended limits using created round. manages this process two main ways. Firstly, it uses shared memory record covered by each case. Secondly, evaluates cases, those high impact are turned into subsequent fuzzing. year’s competition, participate Cover-Error , Cover-Branches Overall categories. 2022 results show significantly increased our score from last year, outperforming all tools