harness-writing

SKILL.md

Writing Fuzzing Harnesses

A fuzzing harness is the entrypoint function that receives random data from the fuzzer and routes it to your system under test (SUT). The quality of your harness directly determines which code paths get exercised and whether critical bugs are found. A poorly written harness can miss entire subsystems or produce non-reproducible crashes.

Overview

The harness is the bridge between the fuzzer's random byte generation and your application's API. It must parse raw bytes into meaningful inputs, call target functions, and handle edge cases gracefully. The most important part of any fuzzing setup is the harness—if written poorly, critical parts of your application may not be covered.

Key Concepts

Concept
Description

Harness
Function that receives fuzzer input and calls target code under test

SUT
System Under Test—the code being fuzzed

Entry point
Function signature required by the fuzzer (e.g., LLVMFuzzerTestOneInput)

FuzzedDataProvider
Helper class for structured extraction of typed data from raw bytes

Determinism
Property that ensures same input always produces same behavior

Interleaved fuzzing
Single harness that exercises multiple operations based on input