oss-fuzz-gen and LegoFuzz

These are ecosystem siblings—OSS-Fuzz-Gen is a general-purpose LLM-guided fuzzer generator that integrates with Google's OSS-Fuzz infrastructure, while LegoFuzz is a specialized LLM-based fuzzing framework purpose-built for compiler testing, allowing them to coexist in the same category while serving distinct fuzzing domains.

oss-fuzz-gen
59
Established
LegoFuzz
36
Emerging
Maintenance 10/25
Adoption 10/25
Maturity 16/25
Community 23/25
Maintenance 6/25
Adoption 7/25
Maturity 16/25
Community 7/25
Stars: 1,372
Forks: 208
Downloads:
Commits (30d): 0
Language: Python
License: Apache-2.0
Stars: 25
Forks: 2
Downloads:
Commits (30d): 0
Language: C
License: Apache-2.0
No Package No Dependents
No Package No Dependents

About oss-fuzz-gen

google/oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

This framework helps software security teams automate and enhance their fuzz testing efforts by using Large Language Models (LLMs) to generate new fuzz targets for C, C++, Java, and Python projects. It takes existing project code and an LLM as input, then outputs new fuzzing code and detailed reports on its effectiveness, including crash discovery and code coverage. This is intended for security engineers and quality assurance professionals focused on identifying vulnerabilities in open-source and proprietary software.

software-security vulnerability-research fuzz-testing static-analysis quality-assurance

About LegoFuzz

cuhk-s3/LegoFuzz

An LLM-based fuzzing framework for C compilers testing.

This project helps compiler engineers systematically test C compilers like GCC and LLVM for bugs. It takes a collection of C code examples, processes them into reusable 'Lego blocks' of functions, and then intelligently combines these blocks to build complex test programs. The system runs these programs through different compiler configurations, compares their outputs, and identifies inconsistencies that indicate a compiler bug. It is ideal for compiler developers and quality assurance engineers.

compiler-testing software-quality-assurance C-programming bug-detection static-analysis

Scores updated daily from GitHub, PyPI, and npm data. How scores work