https://github.com/google/fuzztest

可以用来做模糊测试的工具，和google test的框架差不了太多。

https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt

https://blog.holbertonschool.com/hack-the-virtual-memory-malloc-the-heap-the-program-break/

https://github.com/google/oss-fuzz
libxml2

commit fef12ed81619c79729bf66a906701308a02d6b2b
Author: Nick Wellnhofer <wellnhofer@aevum.de>
Date:   Wed Oct 11 13:32:54 2023 +0200

    buf: Also reset input in error case

    Avoid dangling pointers if memory allocation failed. This could cause
    a use-after-free after recent changes.

    Found by OSS-Fuzz.

https://llvm.org/docs/LibFuzzer.html

commit b45927095e0c857b68a96466e3075d60a6a5dd9e
Author: Nick Wellnhofer <wellnhofer@aevum.de>
Date:   Wed Nov 2 16:22:54 2022 +0100

    malloc-fail: Fix memory leak in xmlStringGetNodeList

    Also make sure to return NULL on error instead of a partial node list.

    Found with libFuzzer, see #344.