TL;DR: We build some LLVM passes which ‘deoptimize’ code generated by LLVM to increase code coverage with AFL (and potentially other feedback driven fuzzers, e.g. libFuzzer). Get the code here. Introduction If you haven’t been living under a rock you probably already heard of American Fuzzy Lop (AFL). In case you did not, here is a quick recap: AFL is a very fast and robust fuzzer which uses code

