[bind10-dev] Fuzzing?

Shane Kerr shane at isc.org
Fri May 28 07:06:19 UTC 2010


All,

I'm not a huge fan of fuzzing as a testing methodology. I think the
cost/benefit is high, especially in open source projects where proper
unit and integration testing should reveal far more problems than fuzz
testing.

But.

Testing is not perfect, and fuzzing can sometimes catch things one
didn't think of. I haven't looked at it yet, but this article just
hit /.:

http://it.slashdot.org/story/10/05/28/009220/CERT-Releases-Basic-Fuzzing-Framework

Maybe something to look at for BIND 10...

--
Shane




More information about the bind10-dev mailing list