<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>OSS-Fuzz on PlumePHP</title><link>https://plumephp.com/tags/oss-fuzz/</link><description>Recent content in OSS-Fuzz on PlumePHP</description><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Sun, 27 Sep 2026 10:00:00 +0800</lastBuildDate><atom:link href="https://plumephp.com/tags/oss-fuzz/index.xml" rel="self" type="application/rss+xml"/><item><title>模糊测试实战：覆盖率引导的自动化漏洞挖掘与 CI 落地</title><link>https://plumephp.com/fuzz-testing/</link><pubDate>Sun, 27 Sep 2026 10:00:00 +0800</pubDate><guid>https://plumephp.com/fuzz-testing/</guid><description>&lt;blockquote&gt;
&lt;p&gt;&lt;strong&gt;模糊测试不是&amp;quot;随机砸数据&amp;quot;，而是一场有向导的探索。&lt;/strong&gt; 现代模糊器（libFuzzer、go native fuzz）利用&lt;strong&gt;覆盖率反馈&lt;/strong&gt;持续引导输入进化——每产生一条新路径就保存下来，不断逼近代码里最深的角落。它是把&amp;quot;未知的崩溃&amp;quot;在提交前就翻出来，而不是等到生产环境被攻击者翻出来。&lt;/p&gt;</description></item></channel></rss>