Porting PCRE2 to Verified Rust: Fuzz Aggressively Using the C Version as an Oracle

jd_pressman · x · 2026-10-30

A thread on porting a regex library to a verified Rust implementation: take the C version's test cases, fuzz aggressively against the C implementation as an oracle, and exploit the fact that regex libraries are essentially pure side-effect-free functions, making them highly amenable to verification. Context: the port only covers the PCRE2 subset used by vapache (Daybreak wanted the PCRE2 dialect); the author may publish it as a separate Rust crate after expanding coverage.

Original post →

More from coding & agent

coding & agent channel →