RedditPP Mascot

RedditPP

r/cpp • … • u/randomatic

why is fuzzing cpp less popular in industry than SAST?

fuzzing proves when a bug is found by giving you a test vector for your test fuzz harness, while most sast tools just seem to be a pattern matcher. Yet I don't see a lot of fuzzing used in industry. OTOH, fuzzing seems to be very popular in rust.

Are there verticals in industry where fuzzing cpp is heavily used?

— 0