OptionFuzz: The Fuzzer with Coverage-Guided Dynamic Configuration Scheduling

Lang Chu, Minhuan Huang, Xiang Li, Yuanping Nie, Wenyu Zhen, Qian Yan. 2025. International Conference on Communication, Computing & Security.

Read the paper · doi:10.1109/icccs65393.2025.11069832

What this paper does with SQLancer

Database systems appear in the opening survey of targets fuzzing has been extended to, alongside operating systems, virtual machine managers, network protocols and autonomous vehicles. The mention is reachable only through the citation marker and carries no relationship beyond acknowledging the domain. OptionFuzz schedules configuration options during coverage-guided fuzzing, on the observation that much of a program's code is reachable only under particular settings, so a fuzzer that never varies configuration cannot reach it. Written by claude-opus-5 from the 1 place this paper refers to SQLancer. The quotations below are the paper's own words, stored verbatim when the text was extracted.

How it was classified

uses infrastructure — no

SQLancer is cited as related work; no reuse of its code, generator or workload is described.

extends technique — no

No SQLancer technique is extended; the citation is background.

compares with — no

No empirical comparison against SQLancer or one of its oracles is reported.

describes as state of the art — no

The text does not describe SQLancer as the state of the art.

SQLancer publications it cites (1)

Bibliography entries that resolved to a SQLancer publication, or to a paper by one of the project's authors. A sentence citing one of these numbers is a reference to SQLancer even when it never writes the name.

#	Entry	Matched as
15	M. Rigger and Z. Su, “Testing database engines via pivoted query synthesis,” in 14th USENIX Symposium on Operating Systems Design and Implementation, OSDI 2020, Virtual Event, November 4-6, 2020. USENIX Association, 2...	sqlancer publication · PQS

Every place it refers to SQLancer (1)

1 sentence, each stored verbatim from the extracted text with where it was found and how. “Citation marker” means the sentence names no tool at all and was reached through a reference number that resolved to a SQLancer publication.

Id	Sentence	Found by	Where
M1	The second aspect aims to expand the application of fuzzing to more targets, such as operating systems[9–12], virtual machine managers[13], network protocols[13, 14], database systems[15, 16], and even autonomous vehicles[17].	citation marker background	I INTRODUCTION page 1

This page is rendered from _data/papers/paper_doi_10_1109_icccs65393_2025_11069832.json, extracted from supplied pdf. 10 pages, 29 references parsed.