Closed Rubilmax closed 1 year ago
Why ? Isn't it less efficient ?
It is, because we do more iteration in total. But as fuzzing inputs are a « black box », testing each branches with a if else does not ensure that those branches has been tested. With one fuzzing test with an assume per branch, we know that each of them has been fuzzed.
Basically extract every:
to: