security research
statusrunning
made ofc · fuzzing · memory-safety
this isn’t a single project, it’s more of a habit. i enjoy going through c/c++ codebases to look for issues and vulnerabilities to patch/disclose.
currently working through:
- haproxy — load balancer / http engine
- h2o — http/1, http/2, http/3 server
- md4c — commonmark parser in c
any cool findings will get threaded into the devlogs once disclosed.