Skip to content
SPECIFICTION
Get listed

Csmith vs OSS-Fuzz

Csmith

github.com

OSS-Fuzz

google.github.io

Side by side

FigureCsmithOSS-Fuzz
Price fromFreeFree
Free planYesYes
Free trial——
Open source——
Web—Yes
WindowsYes—
LinuxYes—
Plans published11
Spec score · Fuzz Testing Software7.8 (#12)7.3 (#19)
PurposeCsmith generates random C programs to find compiler bugs using differential testing.OSS-Fuzz runs fuzzers for open-source projects and privately alerts developers to bugs it detects.

Plans

Csmith

  • CsmithFree

Csmith pricing →

OSS-Fuzz

  • OSS-FuzzFree

OSS-Fuzz pricing →

In their own words

Csmith

Csmith is a free, open-source generator of random C programs for finding compiler bugs through differential testing. Its output avoids undefined behavior and includes statistics for each generated program. A documented workflow compiles programs with GCC and Clang, then compares their outputs to identify differences. The tool can also create material for a C test suite when users do not want to write one themselves. Command-line options shown by csmith -h and csmith -hh customize random generation. Csmith runs locally on Linux and Windows. Ubuntu source builds require g++, CMake, and m4, followed by CMake and make; Windows builds are documented with Visual Studio or WSL. The project says it should build on most modern machines with a C++ compiler. Generated programs may loop indefinitely, so execution timeouts are recommended. The repository includes a COPYING license file. Bug reports and suggestions go through GitHub issues, with discussion on a mailing list; maintainers warn replies may be delayed.

Visit github.com

OSS-Fuzz

OSS-Fuzz has no write-up on Specifiction yet; its figures are above.

Visit google.github.io