Ooops ... What I failed to mention in the talk is that afl-fuzz uses aggressive timeouts. Therefore "hangs" usually aren't a sign of bugs. For details see: /usr/local/share/doc/afl/README