Why CVE-2022-3602 was not detected by fuzz testing
Open-loop fuzz testing catches only the most shallow of bugs. It is like genetic optimization with no fitness function.<p>Why are people still using parsers for untrusted input in C? That is the real flaw here, not how the fuzzing was done.