"Blender: Automatic whole-program fuzzing"
> Blender is a new type of fuzzer that does not require writing the fuzz target function, instead it accepts the binary one wants to test as is (ideally compiled with sanitizers and coverage, but no source code changes). This is intended to solve one of the main problems with fuzzing -- scalability.
github.com/dvyukov…EADME.md
Выглядит интересно, но серьезных багов с таким подходом пока не нашли.