deepSURF outperforms state-of-the-art Rust fuzzing tools in detecting memory corruption vulnerabilities by supporting complex sequences of APIs with diverse and complex argument types, enabling it to detect 26 memory safety bugs that other tools fail to uncover.
The bugs found by deepSURF on the ERASan dataset correspond to bug#1–bug#26 in the table presented in the main repository README.
- Tool-specific harnesses:
../rqs/rq2/<TOOL>/, where<TOOL>∈{deepSURF, RPG, RUG, RULF}.
- URAPI Coverage statistics (per crate):
- deepSURF:
../rqs/rq2/deepSURF/harnesses/<crate>/deepSURF/deepsurf_stats.txt. - RPG, RUG, RULF:
../rqs/rq2/{RPG|RUG|RULF}/urapi_coverage.txt.
- deepSURF:
- Complete list of identified URAPIs per crate:
../rqs/rq2/erasan_urapis.txt.
Note: URAPI Coverage for RUG, RPG, and RULF was computed manually since these tools do not report this metric.