Why CVE-2022-3602 was not detected by fuzz testing
Open-loop fuzz testing catches only the most shallow of bugs. It is like genetic optimization with no fitness function.Why are people still using parsers for untrusted input in C? That is the real flaw here, not how the fuzzing was done.