# Poll: Do you recognize the term "Fuzz Testing", and are you a Software Developer **URL:** \ **Category:** In My Humble Opinion\ **Created:** [February 9, 2024, 10:43pm UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369 "2024-02-09T22:43:12Z")\ **Posts on this page:** 6\ **Page:** 3
**Author:** ![Sam\_Stone](https://avatars.discourse-cdn.com/v4/letter/s/ecccb3/32.png) [@Sam\_Stone](https://boards.straightdope.com/u/Sam_Stone)\ **Post date:** [February 11, 2024, 8:02pm UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369/41 "2024-02-11T20:02:09Z")
That’s a failure of requirements analysis. ---
**Author:** ![leahcim](https://avatars.discourse-cdn.com/v4/letter/l/b4bc9f/32.png) [@leahcim](https://boards.straightdope.com/u/leahcim)\ **Post date:** [February 11, 2024, 9:05pm UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369/42 "2024-02-11T21:05:40Z")
> [@Chronos](#): > > But what if, with the right (wrong) input, it gives an error message, and starts overwriting files, or something? That’s why formal verification people like pure functional languages. The inputs are the parameters. The output is the return value. And no side effects are allowed. Of course, an actual implementation of a functional language can’t make those claims. But it is much less likely that a program that is not trying to touch the disk at all is going to overwrite files willy nilly. ---
**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\ **Post date:** [February 11, 2024, 9:39pm UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369/43 "2024-02-11T21:39:32Z")
I think I’ve checked the return value of printf() at least once, but it was probably in the context of a programming class on the topic of validation. Though, if it does fail, what do you do then? Return an error message? And what if fprintf to stderr fails also? One of my most awestruck moments as a teacher was when I was teaching a week-long summer camp on video game design, mostly using Scratch. One of my students, a middle-schooler, decided to add a high scores list to his game, which required asking the high-scoring player to type in their name. Which he then proceeded to do input validation on. With no prior programming experience at all, according to both him and his parents. ---
**Author:** ![Sam\_Stone](https://avatars.discourse-cdn.com/v4/letter/s/ecccb3/32.png) [@Sam\_Stone](https://boards.straightdope.com/u/Sam_Stone)\ **Post date:** [February 11, 2024, 9:47pm UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369/44 "2024-02-11T21:47:12Z")
I used to check the output of the various library print functions all the time. But that was quite a while ago, when some compilers or implentations would have bugs. I think there was a serious buffer oveflow issue with an implentation of printf() at one point. Then there’s sprintf, fprintf, and about a million overloads of these functions. So yeah, assuming they all work flawlessly all the time is not a good idea. But hopefully proper unit testing of the functions that call them will suffice. ---
**Author:** ![Projammer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/projammer/32/559_2.png) [@Projammer](https://boards.straightdope.com/u/Projammer)\ **Post date:** [February 14, 2024, 2:27am UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369/45 "2024-02-14T02:27:45Z")
There wasn’t an option for my ‘correct’ status. I’m a former developer who recognized the phrase. But I moved on to other endeavors years before the phrase was coined. The only development I do these days is Powershell scripting for task automation. In my days it was called Monkey testing. ---
**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\ **Post date:** [February 14, 2024, 9:27am UTC](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369/46 "2024-02-14T09:27:15Z")
After what I said about fuzz testing, I find out that I had this video in one of my tabs, that I hadn’t yet watched: [![](https://img.youtube.com/vi/PJLWlmp8CDM/maxresdefault.jpg "Finding The .webp Vulnerability in 8s (Fuzzing with AFL++)") ](https://www.youtube.com/watch?v=PJLWlmp8CDM) [Previous page](https://boards.straightdope.com/t/poll-do-you-recognize-the-term-fuzz-testing-and-are-you-a-software-developer/997369.md?page=2)