Sergey Bronnikov

Buidling @TarantoolDB. I make software suck less: software quality, testing, and verification. Writing to @openbsdnow and

[Sergey Bronnikov @estet]

Видеозапись доклада "Винил снова в моде, или История дискового движка в Tarantool"

https://t.co/uLTGzTQ9O3

[CF Bolz-Tereick @cfbolz]

Just got the first actual PyPy JIT optimizer bug that Z3 found! And it spits out a nice example of values that show the miscompilation.

The bug is again about integer overflow, but this time it is in the common subexpression elimination (CSE) logic.

[CF Bolz-Tereick @cfbolz]

I'm trying to reflect on bugs that I find, particularly those that I introduced myself. Will add them to this thread:

[The PyPy Project @pypyproject]

Now blog post by @cfbolz:
'Finding Simple Rewrite Rules for the JIT with Z3'
How to use the Z3 API to find simple rewrites of integer operations, such as x & 0 -> 0
https://t.co/mbEGj8r04k

[Sergey Bronnikov @estet]

@jussisaur There is a modern version

[Sergey Bronnikov @estet]

A distributed systems reliability glossary

https://t.co/aQzBFOXGvr

[Abhishek Arya @infernosec]

Sharing slides and video for my keynote at OSS EU'24: "Securing the software commons: Standards, Automation, and AI for a Resilient Open Source Future"
Slides: https://t.co/XmMfjeo6QX
Video: https://t.co/RMMZZlY3j3

[KC Sivaramakrishnan @kc_srk]

This should be fun!

[Alexey Vishnyakov @VishnyaSweet]

I'm happy to announce the release of a new open-source library we've been working on: Go library for structure-aware fuzzing, designed as an analogue to libprotobuf-mutator. Fuzz your gRPC APIs and integrate into SSDLC.

https://t.co/fVUYuaVaGF

#fuzzing #go #grpc #ssdlc

[Krister Walfridsson @kwalfridsson]

I’ve posted a mid-year update for my GCC translation validation tool, smtgcc, to the GCC mailing list:
https://t.co/J1FlZYAdlu

[Sergey Bronnikov @estet]

Видеозапись моего доклада на PHDays 2025 "Фаззинг как основа эффективной разработки на примере LuaJIT"

https://t.co/ioIbP5xXSx

Слайды: https://t.co/0wG1R6zuw0

[George Pîrlea @GeorgePirlea]

There's been a recent addition to the list, thanks to @estet. A bug in a preliminary version of a Software Transactional Memory (STM) algorithm.

[Alastair Donaldson @afd_icl]

"Model Checking Futexes", to be presented at SPIN, part of @ETAPSconf, in April. Joint with Hugues Evrard.

Shows how model checking can be used to understand the mind-blowing (for me!) subtleties of futex-based synchronisation primitives.

https://t.co/ksLWLA3nAI

[Dmitry Vyukov @dvyukov]

Excited to present new(?) approach to #fuzzing where one doesn't need to write fuzz functions.
Wanna fuzz all binaries on github - no problem.
Just give the fuzzer binaries to test. No false positives & 100% fidelity.

Blender: whole-program fuzzing:
https://t.co/K0ZQw2L1As

[Sergey Bronnikov @estet]

Выложили видео моего доклада про реализацию поддержки фаззинга Lua-скриптов, чтобы тестировать сервер приложений в СУБД Tarantool.

https://t.co/4zwk3HJ50D

[Andrey Fedotov @anfedotoff]

My blog post about #fuzzing #go project golang/image: https://t.co/36RtuAMlBR
0. Changing existing fuzz target to find new bugs.
1. Approach for code coverage collection after fuzzing with go-fuzz libFuzzer.
2. Go panic triage with #casr.
3. Fix: https://t.co/eXK3wiD4rW

[Abhik Roychoudhury @AbhikRoychoudh1]

This tweet is for FUZZING enthusiasts !! Our research group at NUS (https://t.co/JCVXCHKLRK) is looking for practitioners and researchers to take this survey about software testing: https://t.co/AP3KNPcM3F

We'll donate $5 USD to Doctors Without Borders (up to 100 responses)!

[Sergey Bronnikov @estet]

Announcing Semgrep’s beta support for Rust

https://t.co/Ao4Z8S9zSh

[Sergey Bronnikov @estet]

@IgorKurochkin + https://t.co/c0V6nKtsgP

[Lobsters @lobsters]

luzer: A coverage-guided, native Lua fuzzing engine
by @estet
https://t.co/A3oRrZjnOr #lua #programming #security #testing
https://t.co/t1H0Nhn4rP