macOS
Homebrewvérifié · 100%
brew install cargo-fuzzlocal Homebrew formula metadata
brew
Installer cargo-fuzz avec Homebrew, Nix, pacman
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de cargo-fuzz pour les workflows d'agents IA.
installation
Commandes d'installation supplémentaires
Linux
Nixvérifié · 92%
nix profile install nixpkgs#cargo-fuzznixpkgs package indexes · pkgs/by-name/ca/cargo-fuzz/package.nix · Source: api.github.com
Arch Linux pacmanvérifié · 92%
sudo pacman -S cargo-fuzzArch Linux sync databases · cargo-fuzz · Source: geo.mirror.pkgbuild.com
aperçu
Résumé du paquet
Command-line helpers for fuzzing
Liens du projet
Commandes et alias
- cargo-fuzz
historique
Historique du projet et usages
cargo-fuzz is the standard Cargo subcommand for driving libFuzzer against Rust crates. It is part of the rust-fuzz project family and is documented by the Rust Fuzz Book as the recommended tool for fuzz testing Rust code.
The package matters because it made coverage-guided fuzzing feel like an ordinary Rust workflow: initialize a fuzz target, add test harnesses, run them through Cargo, minimize failing inputs, and generate coverage.
Historique du projet
The cargo-fuzz repository and crate were created in February 2017, early in Rust's effort to make fuzz testing practical for library authors. The README describes it as a Cargo subcommand for fuzzing with libFuzzer, while the Rust Fuzz Book clarifies that cargo-fuzz invokes a fuzzer rather than being a fuzzer itself.
The tool standardized the `fuzz/` directory layout for Rust crates. `cargo fuzz init` creates a fuzzing project, `cargo fuzz add` creates targets, and `cargo fuzz run` executes them through libFuzzer via the libfuzzer-sys crate.
Historique d'adoption
cargo-fuzz became the mainstream Rust path for libFuzzer-based testing because it followed Cargo conventions and came with an official guide. The Rust Fuzz Book places it alongside afl.rs but explicitly recommends cargo-fuzz for Rust code.
The rust-fuzz ecosystem also keeps a trophy-case repository for bugs found through fuzz testing, reinforcing cargo-fuzz as part of Rust's security and reliability culture rather than a standalone experiment.
Modes d'utilisation
Typical usage begins with `cargo fuzz init`, then `cargo fuzz add <target>`, and then `cargo fuzz run <target>`. The README also documents commands for formatting generated inputs, minimizing a crashing testcase, minimizing corpora, and collecting coverage.
The README notes important platform constraints: libFuzzer needs LLVM sanitizer support, Unix-like operating systems for the primary workflow, a nightly compiler for unstable flags, and a C++11 compiler.
Pourquoi les passionnés de paquets s'y intéressent
cargo-fuzz is one of the clearest examples of Cargo's subcommand model turning advanced compiler/runtime machinery into a discoverable package. It hides LLVM sanitizer and libFuzzer details behind a small command set that Rust maintainers can add to CI and security workflows.
For package-history work, it also marks a moment when fuzzing moved from specialist security tooling into normal Rust package maintenance.
Chronologie
- 2017-02-21: GitHub repository created and cargo-fuzz 0.1.0 published to crates.io.
- 2017: Rust Fuzz Book documents cargo-fuzz as a recommended Rust fuzzing path.
- 2020s: The tool grows commands for testcase minimization, corpus minimization, and coverage reporting.
- 2026: Crate has more than 3 million crates.io downloads and remains active under rust-fuzz.
Related projects
- libFuzzer is the fuzzing engine invoked by cargo-fuzz through libfuzzer-sys.
- The Rust Fuzz Book also documents afl.rs as another Rust fuzzing tool.
- rust-fuzz/trophy-case collects bugs found by cargo-fuzz and other fuzzing tools.
Sources
posture de sécurité
Niveau de risque : vert
narrow executable package without higher-risk signals.
Classificateur de risque
risque vert · confiance faible · appliance
Pourquoi
- narrow executable package without higher-risk signals
Signaux
- metadata:no-higher-risk-signals
Comportement d'installation
- Aucun hook post-install Homebrew n’est enregistré dans les métadonnées de formule.
- Les métadonnées de bottle Homebrew sont disponibles pour 6 plateformes.
- Les métadonnées de compilation listent 1 dépendances de compilation.
Revue recommandée
Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
fuzz/Cargo.toml
exécutables
Exécutables installés
| Commande | Type | Exposition | Note |
|---|---|---|---|
cargo-fuzz | cli | exécutable global |
fraîcheur
Version et fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
page générée2026-07-25
version du gestionnaire0.13.2
gestionnaire mis à jour2026-06-09
données localesOK
amontà jour
dernière version détectée0.13.2
https://github.com/rust-fuzz/cargo-fuzz
- OKAucun avertissement de fraîcheur n'a été généré.
métadonnées d'installation
Métadonnées du paquet
| Clé du paquet | brew:cargo-fuzz |
|---|---|
| Version | 0.13.2 |
| Gestionnaire de paquets | Homebrew |
| Page du gestionnaire de paquets | https://formulae.brew.sh/formula/cargo-fuzz |
| Page d'accueil | https://rust-fuzz.github.io/book/cargo-fuzz.html |
| Dépôt | https://github.com/rust-fuzz/cargo-fuzz |
| Docs amont | https://rust-fuzz.github.io/book/cargo-fuzz.html |
| Licence | Apache-2.0 AND MIT |
| Archive source | https://github.com/rust-fuzz/cargo-fuzz/archive/refs/tags/0.13.2.tar.gz |
| Dernière mise à jour | 2026-06-09T23:51:17Z |
| Pulse | updated |
| Dépendances de compilation | rust |
| Bouteille | disponible (sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| post-install Homebrew | non défini |
| Service | aucun déclaré |
faits du registre
Détails de la base source
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | cargo-fuzz |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
correspondances dans les bases sources
Autres enregistrements de gestionnaires de paquets
Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.
Nix95%
cargo-fuzz
nix profile install nixpkgs#cargo-fuzz- normalized package name match
- Correspondance par : Cargo Fuzz
pacman95%
cargo-fuzz 0.13.1-3
Command line helpers for fuzzing rust
https://github.com/rust-fuzz/cargo-fuzz
sudo pacman -S cargo-fuzz- License: MIT AND Apache-2.0
- Architecture: x86_64
- 3 Dépendances
- normalized package name match
- Correspondance par : Cargo Fuzz
piste source
Généré depuis les données du dépôt
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Sources utilisées
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment