@estet

Buidling @TarantoolDB. I make software suck less: software quality, testing, and verification. Writing to @openbsdnow and https://xitter.cf/t.co/ccSm1xODGX.

 @[email protected]
bronevichok.ru/
Joined December 2007
  • Tweets6.7K
  • Following451
  • Followers582
621Media
Видеозапись доклада "Винил снова в моде, или История дискового движка в Tarantool" youtube.com/watch?v=mWlxZ8Mn…

Винил снова в моде, или История дискового движка в Tarantool

В инженерной работе есть как успехи, так и провалы. Причем о послед...

youtube.com
1
1
188
Sergey Bronnikov retweeted
CF Bolz-Tereick@cfbolz19 Oct 2022
Just got the first actual PyPy JIT optimizer bug that Z3 found! And it spits out a nice example of values that show the miscompilation. The bug is again about integer overflow, but this time it is in the common subexpression elimination (CSE) logic.
CF Bolz-Tereick@cfbolz18 Oct 2022
Replying to @cfbolz
And the first bugs are rolling in! I hooked up our random trace IR generator with the optimizer and the tiny Z3 equivalence checker. Found and fix three of them now. Amusingly the bugs were all assertion failures in the optimizer, so that we didn't even reach Z3.
1
2
1
15
Sergey Bronnikov retweeted
CF Bolz-Tereick@cfbolz16 Jan 2022
I'm trying to reflect on bugs that I find, particularly those that I introduced myself. Will add them to this thread:
2
5
22
Sergey Bronnikov retweeted
The PyPy Project@pypyproject12 Jul 2024
Now blog post by @cfbolz: 'Finding Simple Rewrite Rules for the JIT with Z3' How to use the Z3 API to find simple rewrites of integer operations, such as x & 0 -> 0 pypy.org/posts/2024/07/findi…

Finding Simple Rewrite Rules for the JIT with Z3

In June I was at the PLDI conference in Copenhagen to present a paper I co-authored with Max Bernstein. I also finally met John Regehr, who I'd been talking on social media for ages but had never met.

pypy.org
10
36
2,305
A distributed systems reliability glossary antithesis.com/resources/rel…

A distributed systems reliability glossary | Antithesis Docs

A list of key concepts for building and testing reliable distributed systems, with basic definitions and deep references.

antithesis.com
74
Sergey Bronnikov retweeted
Abhishek Arya
@infernosec16 Sep 2024
Sharing slides and video for my keynote at OSS EU'24: "Securing the software commons: Standards, Automation, and AI for a Resilient Open Source Future" Slides: drive.google.com/file/d/186i… Video: youtube.com/watch?v=NwI2MkAN…

Securing_the_Software_Commons_keynote_by_Abhishek_Arya.pdf

drive.google.com
1
9
36
3,269
Sergey Bronnikov retweeted
KC Sivaramakrishnan@kc_srk1 Jul 2025
This should be fun!
4
12
124
5,184
Sergey Bronnikov retweeted
Alexey Vishnyakov@VishnyaSweet1 Jul 2025
I'm happy to announce the release of a new open-source library we've been working on: Go library for structure-aware fuzzing, designed as an analogue to libprotobuf-mutator. Fuzz your gRPC APIs and integrate into SSDLC. github.com/yandex-cloud/go-p… #fuzzing #go #grpc #ssdlc

GitHub - yandex-cloud/go-protobuf-mutator: This is a go-protobuf-mutator library for random value...

This is a go-protobuf-mutator library for random value mutations. This is a Go equivalent of libprotobuf-mutator, which is implemented in C++. - yandex-cloud/go-protobuf-mutator

github.com
1
1
116
I’ve posted a mid-year update for my GCC translation validation tool, smtgcc, to the GCC mailing list: gcc.gnu.org/pipermail/gcc/20…
2
11
574
Видеозапись моего доклада на PHDays 2025 "Фаззинг как основа эффективной разработки на примере LuaJIT" youtube.com/watch?v=eVA7FroQ… Слайды: bronevichok.ru/papers/2025-p…

Фаззинг как основа эффективной разработки на примере LuaJIT

Представьте, что в основе вашего коммерческого продукта лежит компо...

youtube.com
2
247
Sergey Bronnikov retweeted
George Pîrlea
@GeorgePirlea23 Aug 2023
There's been a recent addition to the list, thanks to @estet. A bug in a preliminary version of a Software Transactional Memory (STM) algorithm.
Citation of Alexey Belyaev - "Verifying an algorithm for transaction memory support", published in 2010 in Russian.

ALT Citation of Alexey Belyaev - "Verifying an algorithm for transaction memory support", published in 2010 in Russian.

2
3
572
Sergey Bronnikov retweeted
Alastair Donaldson@afd_icl14 Mar 2023
"Model Checking Futexes", to be presented at SPIN, part of @ETAPSconf, in April. Joint with Hugues Evrard. Shows how model checking can be used to understand the mind-blowing (for me!) subtleties of futex-based synchronisation primitives. doc.ic.ac.uk/~afd/homepages/…
4
10
1,525
Sergey Bronnikov retweeted
Dmitry Vyukov@dvyukov13 Mar 2023
Excited to present new(?) approach to #fuzzing where one doesn't need to write fuzz functions. Wanna fuzz all binaries on github - no problem. Just give the fuzzer binaries to test. No false positives & 100% fidelity. Blender: whole-program fuzzing: github.com/dvyukov/centipede…
7
65
2
214
36,358
Выложили видео моего доклада про реализацию поддержки фаззинга Lua-скриптов, чтобы тестировать сервер приложений в СУБД Tarantool. youtu.be/TRNifH9N5zM

Сергей Бронников — Добавляем поддержку скриптового языка в AFL и...

Ближайшая конференция — Heisenbug 2025 Autumn, 19—20 октября, Санкт...

youtube.com
3
208
Sergey Bronnikov retweeted
Andrey Fedotov@anfedotoff10 Mar 2023
My blog post about #fuzzing #go project golang/image: github.com/ispras/oss-sydr-f… 0. Changing existing fuzz target to find new bugs. 1. Approach for code coverage collection after fuzzing with go-fuzz libFuzzer. 2. Go panic triage with #casr. 3. Fix: github.com/golang/image/pull…

Fuzzing golang image (Go) project with sydr fuzz (go fuzz backend)

OSS-Sydr-Fuzz - OSS-Fuzz fork for hybrid fuzzing (fuzzer+DSE) open source software. - ispras/oss-sydr-fuzz

github.com
4
5
267
This tweet is for FUZZING enthusiasts !! Our research group at NUS (abhikrc.com/projects/Fuzz/) is looking for practitioners and researchers to take this survey about software testing: lnkd.in/g6f_2ftd We'll donate $5 USD to Doctors Without Borders (up to 100 responses)!
10
1
20
4,304
Announcing Semgrep’s beta support for Rust semgrep.dev/blog/2023/announ…

Announcing Semgrep’s beta support for Rust

Programming language, or cult following?

semgrep.dev
1
2
131
Sergey Bronnikov retweeted
Lobsters@lobsters1 Mar 2023
luzer: A coverage-guided, native Lua fuzzing engine by @estet lobste.rs/s/pc8zx8 #lua #programming #security #testing github.com/ligurio/luzer
2
4
321
Sergey Bronnikov retweeted
Thorsten Holz@thorstenholz1 Mar 2023
Fuzzilli (github.com/googleprojectzero…), the great coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language built by @5aelo, is finally documented in a paper. You can find the paper at ndss-symposium.org/ndss-pape…

GitHub - googleprojectzero/fuzzilli: A JavaScript Engine Fuzzer

A JavaScript Engine Fuzzer. Contribute to googleprojectzero/fuzzilli development by creating an account on GitHub.

github.com
NDSS Symposium@NDSSSymposium28 Feb 2023
Fascinating discussion ongoing in Fuzzing session at #NDSS23: FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities.
1
27
81
15,728
Sergey Bronnikov retweeted
Serokell@serokell14 Feb 2023
We’re seeking an OCaml software engineer to develop the software ecosystem and smart contract language of an open-source blockchain platform. Learn more: serokell.io/jobs/ocaml-new
6
17
2,308
Load more