.png){kind=icon}
.png){kind=icon}
Return
Towards Path-Aware Coverage-Guided Fuzzing
.png){kind=icon}
PRE
AI
DOI：10.1109/CGO68049.2026.11395191.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Automated fuzz testing is now standard practice, yet key blind spots persist. Coverage-guided fuzzers typically rely on edge coverage as a lightweight proxy for program behavior. However, this metric captures path variations only weakly: it cannot differentiate executions that follow distinct control-flow paths but traverse the same edges-causing many path-dependent bugs to go undetected. Path awareness would offer a richer coverage view but has been considered too costly for fuzzing. We introduce a lightweight method for tracking intraprocedural execution paths, enabling efficient path-aware feedback. This enhances the fuzzer's ability to detect subtle bugs, even in well-tested software. To counter the resulting seed explosion, we evaluate two strategies-culling and opportunistic path-aware fuzzing-that balance precision and throughput. Our findings show that path-aware fuzzing, when properly guided, uncovers more bugs and reveals untapped potential in fuzzing research.
Keywords:
Fuzzing
Coverage feedback
Path profiling
Journal
2
IF:
0
Papers:
48
Citations:
0