Don't Panic! Finding Bugs Hidden Behind Rust Runtime Safety Checks

作者：Zeyang Zhuang, Zilun Wang, Wei Meng, Michael R. Lyu · 年份：2025 · DOI：10.1145/3719027.3765142 · 被引用次数：1 · 研究领域：Software Testing and Debugging Techniques、Security and Verification in Computing、Logic, programming, and type systems

Rust has been extensively used in software and system development due to its guarantees for memory and concurrency safety. Fuzzing is a popular bug detection technique for examining the correctness and robustness of programs. However, we identify that current state-of-the-art Rust fuzzers are significantly impeded by the ubiquitous presence of Rust runtime safety checks, resulting in poor effectiveness and efficiency. These checks, which are inserted either implicitly by the compiler or explicitly by the compiler or developers, could cause a high number of panic crashes and early program termination in fuzzing. Consequently, current fuzzers are unable to effectively explore deep code behind the runtime safety checks, leaving potential vulnerabilities undetected.