Skip to content
SPECIFICTION
Get listed

cargo-fuzz vs OSS-Fuzz

cargo-fuzz

github.com

OSS-Fuzz

google.github.io

Side by side

Figurecargo-fuzzOSS-Fuzz
Price fromFreeFree
Free planYesYes
Free trial——
Open source——
Web—Yes
WindowsYes—
macOSYes—
LinuxYes—
Plans published11
Spec score · Fuzz Testing Software8.5 (#5)7.3 (#19)
Purposecargo-fuzz is a cargo subcommand for fuzzing with libFuzzer.OSS-Fuzz runs fuzzers for open-source projects and privately alerts developers to bugs it detects.

Plans

cargo-fuzz

  • cargo-fuzzFree

cargo-fuzz pricing →

OSS-Fuzz

  • OSS-FuzzFree

OSS-Fuzz pricing →

In their own words

cargo-fuzz

cargo-fuzz is a Cargo subcommand for fuzzing Rust code. It invokes libFuzzer through the libfuzzer-sys crate rather than acting as a fuzzer itself. Start a crate with `cargo fuzz init`, add a target with `cargo fuzz add `, then use `cargo fuzz run ` to search for bugs. The tool can reduce a failing input with `cargo fuzz tmin` or trim a corpus with `cargo fuzz cmin`; `cargo fuzz coverage` generates source-based coverage information in version 0.10.0 or newer. Documentation also covers structure-aware fuzzing and Cargo feature options, plus a GitHub Actions workflow for building and running targets in CI. It supports Linux, macOS and Windows, with documented systems including x86-64 Linux, x86-64 and Apple-Silicon macOS, and Windows with LLVM sanitizer support. Windows programs can also be fuzzed with MSVC AddressSanitizer. Installation is documented as `cargo install cargo-fuzz`. It requires nightly Rust and a C++11-capable compiler. The project is free and distributed under the MIT and Apache License 2.0.

Visit github.com

OSS-Fuzz

OSS-Fuzz has no write-up on Specifiction yet; its figures are above.

Visit google.github.io