Csmith vs Wfuzz
Csmith
github.comWfuzz
github.comSide by side
| Figure | Csmith | Wfuzz |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Fuzz Testing Software | 7.8 (#12) | 7.3 (#20) |
| License | The repository includes a COPYING license file. | The GitHub repository identifies the project as licensed under GPL-2.0. |
| Purpose | Csmith generates random C programs to find compiler bugs using differential testing. | Wfuzz is a framework for automating web application security assessments and finding and exploiting web application vulnerabilities. |
| Support | The project directs users to GitHub issues for bug reports and suggestions and provides a mailing list for discussion. | The project links to documentation and uses GitHub issues and pull requests for project activity. |
Plans
In their own words
Csmith
Csmith is a free, open-source generator of random C programs for finding compiler bugs through differential testing. Its output avoids undefined behavior and includes statistics for each generated program. A documented workflow compiles programs with GCC and Clang, then compares their outputs to identify differences. The tool can also create material for a C test suite when users do not want to write one themselves. Command-line options shown by csmith -h and csmith -hh customize random generation. Csmith runs locally on Linux and Windows. Ubuntu source builds require g++, CMake, and m4, followed by CMake and make; Windows builds are documented with Visual Studio or WSL. The project says it should build on most modern machines with a C++ compiler. Generated programs may loop indefinitely, so execution timeouts are recommended. The repository includes a COPYING license file. Bug reports and suggestions go through GitHub issues, with discussion on a mailing list; maintainers warn replies may be delayed.