https://blog.leavitt.dev/tags/coverage/ Recent content in Coverage on Corey Leavitt Hugo en-us Wed, 16 Sep 2026 00:00:00 +0000 https://blog.leavitt.dev/posts/nelli-ir-aware-fuzzing/ Wed, 16 Sep 2026 00:00:00 +0000 https://blog.leavitt.dev/posts/nelli-ir-aware-fuzzing/ A byte fuzzer pointed at a structured input spends most of its budget on inputs the decoder throws away. nelli mutates the typed choice sequence directly, so every mutant is valid by construction, and it uses a comparison log to defeat magic-value branches exactly.