How I’ve found vulnerability in a popular Rust crate (and you can too)

I have recently discovered a zero-day vulnerability in a fairly popular and well-designed Rust crate. In this article I’m going to discuss how I did it and why it wasn’t discovered earlier, and introduce a new tool, libdiffuzz , that I’ve created for the job. A recently discovered vulnerability in Rust standard library makes a cameo appearance. In my earlier article about a one-line unsafe block that has nearly ruined everything I’ve explained how I’ve used fuzzing to look for vulnerabilities in widely used