I've run the new mut_while_iter fuzz target for using AFL++ ~8 hours with 8 parallell processes, and using libFuzzer for ~7 hours with 6 parallell processes, to test whether Foundation's mutation detection is precise enough to catch all errors, such that we can declare it sound.
A concrete place where this will be useful is Winit, which stores a RefCell<Id<NSMutableAttributedString>> inside of a subclass of NSView to track marked text, but the RefCell here should be completely unnecessary.
Part of https://github.com/madsmtm/objc2/issues/563.
I've run the new
mut_while_iterfuzz target for using AFL++ ~8 hours with 8 parallell processes, and using libFuzzer for ~7 hours with 6 parallell processes, to test whether Foundation's mutation detection is precise enough to catch all errors, such that we can declare it sound.A concrete place where this will be useful is Winit, which stores a
RefCell<Id<NSMutableAttributedString>>inside of a subclass ofNSViewto track marked text, but theRefCellhere should be completely unnecessary.