Blogged: Combining Coverage-Guided and Generation-Based Fuzzing (in Rust)

or "How to :sparkles: easily :sparkles: reuse your quickchecks with libFuzzer/AFL to get both structure-aware test case generation and coverage-guided fuzzing"

Coverage-guided fuzzing and generation-based fuzzing are two powerful approaches to fuzzing. It can be tempting to think that you must either use one approach or the other at a time, and that they can’t be combined. However, this is not the case. In this blog post I’ll describe a method for combining coverage-guided fuzzing with structure-aware generators that I’ve found to be both effective and practical.