# OSS-Fuzz

Formal verification once took years of expert effort and was reserved for code such as avionics. In a collaboration with Theorem, Claude turned existing fuzz tests in open-source libraries into specifications and then produced proofs over compiled RISC-V assembly for 239 entry points across 123 OSS-Fuzz libraries, patching the bugs it found along the way. The proofs assume a single-threaded, statically linked RISC-V binary on Linux with a fixed memory budget and inputs up to 64 MB.

Formal verification once took years of expert effort and was reserved for code such as avionics. In a collaboration with Theorem, Claude turned existing fuzz tests in open-source libraries into specifications and then produced proofs over compiled RISC-V assembly for 239 entry points across 123 OSS-Fuzz libraries, patching the bugs it found along the way. The proofs assume a single-threaded, statically linked RISC-V binary on Linux with a fixed memory budget and inputs up to 64 MB.