↓ Skip to main content

“Unsurprisingly, it took less than a second to find the first issue!”

Andreas Klingawesomekling.substack.com ↗

Andreas Kling pointed Project Zero’s Domato fuzzer at Ladybird and hit a crash in under a second, then another in under a second. The bugs were null pointer dereferences and infinite loops from assuming every table cell has a table and every document has a window. He found five, fixed five and stopped because it could go on for quite some time. A browser that folds this fast against a free public fuzzer has not met a real attacker yet.