As described in this post we could experiment with restarting secondary workers on an empty corpus to find new coverage.
For example, every 8th fuzzer could have the following lifecycle:
- start on empty corpus without any shared seeds
- run for T (e.g. T=1 hour)
- sync corpus both ways
- run for T
- stop fuzzer and back to 1
As described in this post we could experiment with restarting secondary workers on an empty corpus to find new coverage.
For example, every 8th fuzzer could have the following lifecycle: