Differential Fuzzing Campaign on a Production C Compiler Backend
Overview
What this challenge is about.
Differential Fuzzing Campaign on a Production C Compiler Backend. Advanced challenge in research. Conducting rigorous research on real questions, earn a bloc...
The Brief
What you'll do, and what you'll demonstrate.
Judge whether the six suspected-correlated reports share root causes, and run a two-week differential-fuzzing campaign that surfaces and proves at least eight distinct, reproducible miscompilations in the C backend.
This is not a research exercise. It is the work a researcher does to produce findings that withstand scrutiny. That distinction matters to every hiring manager who has seen candidates summarize papers and none who have produced original findings under expert review.
When you finish, you will have something most graduates do not: a real-world deliverable, verified by Ewance, that you can show to a hiring manager and say "I did this. Here is the proof."
Earning criteria — what you'll demonstrate
- Design and operate a high-throughput differential-fuzzing pipeline using a random C program generator and a second compiler as the behavioral oracle
- Distinguish genuine miscompilations from generator artifacts, undefined behavior, and oracle quirks when interpreting divergences
- Cluster and de-duplicate large numbers of failures into distinct root causes tied to specific optimization passes
- Minimize failing inputs to small, standalone reproducers without losing the underlying defect
- Write upstream bug reports that maintainers can act on, with reproducer, oracle evidence, and root-cause reasoning
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Aligned coursework coming soon.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Fuzzing
Apply fuzzing to solve real industry problems and demonstrate production-level capability.
- Differential Testing
Apply differential testing to solve real industry problems and demonstrate production-level capability.
- Test Case Minimization
Apply test case minimization to solve real industry problems and demonstrate production-level capability.
- Compiler Passes
Apply compiler passes to solve real industry problems and demonstrate production-level capability.
- Bug Triage
Apply bug triage to solve real industry problems and demonstrate production-level capability.
- Benchmarking
Apply benchmarking to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles:
Compiler QA / Toolchain Security Engineer
This challenge mirrors how toolchain teams harden production compilers: you build a differential oracle, run it at scale against a real backend, and tie failures to specific optimization passes — exactly the workflow used to keep code generators trustworthy in safety-relevant builds.
This challenge sharpens
- fuzzing
- differential-testing
- compiler-passes
Vulnerability Researcher
Surfacing, minimizing, and triaging defects in a complex codebase is the core loop of vulnerability research. You practice driving a fuzzer to unique findings, shrinking them to crisp reproducers, and clustering them into distinct root causes worth reporting.
This challenge sharpens
- fuzzing
- test-case-minimization
- bug-triage
Build & Release Reliability Engineer
Release teams gate shipping compilers on differential and regression evidence. This challenge builds the muscle of measuring campaign throughput, comparing two compilers under matched settings, and triaging divergences into actionable defect records before a release goes out.
This challenge sharpens
- differential-testing
- benchmarking
- bug-triage