TODO (things somebody should do or fund) - Fuzz the rest of the ElectroBSD/FreeBSD userland - Try to leverage DTrace's fbt provider to let afl-fuzz figure out "kernel paths" - Or maybe just move kernel code to user space (Apparently OpenZFS upstream is already working on this, other parts have been moved already) - Create a LD_PRELOAD library that tricks applications like ggated into treating stdin as network input so they can be fuzzed with afl-fuzz without being patched first.