Presently the coreutils are only tested for correctness, and only in limited ways.
There are no tests for segmentation faults (aside from some cleverly named tests), or for buffer overrun vulnerabilities. An extensive fuzzer should be run over all lc-coreutils. Additionally, all coreutils should be run automatically with valgrind, failing if any memory errors are detected.
Progress:
Presently the coreutils are only tested for correctness, and only in limited ways.
There are no tests for segmentation faults (aside from some cleverly named tests), or for buffer overrun vulnerabilities. An extensive fuzzer should be run over all lc-coreutils. Additionally, all coreutils should be run automatically with valgrind, failing if any memory errors are detected.
Progress: