Learning Go-Fuzz 2: goexif2

parsiya.net

Previously on Learning Go-Fuzz: "Learning Go-Fuzz 1: iprange" This time I am looking at a different package. This is a package called goexif at https://github.com/rwcarlsen/goexif. Being a file parser, it's a prime target for Go-Fuzz. Unfortunately it has not been updated for a while. Instead, we will be looking at a fork at https://github.com/xor-gate/goexif2. Code and fuzzing artifacts are at: https://github.com/parsiya/Go-Security/tree/master/go-fuzz/goexif2