一句话：提出 RusyFuzz，以未处理异常（panic）为引导信号，针对 Rust 内核特有失败模式进行模糊测试。
Rust 的类型系统与所有权模型消除了操作系统内核中的许多传统内存安全问题，但逻辑错误（如未检查的索引、unwrap 失败等）仍会触发 panic!，导致整个系统崩溃。现有内核模糊测试器主要面向 C 语言内核并依赖 KCOV，将所有崩溃一视同仁，未能考虑 Rust 特有的失败模式。为此，作者提出 RusyFuzz，利用未处理异常作为引导信号，识别并优先探索 Rust 内核中易触发 panic 的路径，从而更有效地发现被现有工具忽略的 Rust 特有缺陷。摘要未详述具体实验设置与结果，但问题定位与工具设计针对 Rust OS 内核的 panic 崩溃场景。
Rust’s strong type system and ownership model eliminate many traditional memory safety issues in OS kernels. However, logic errors—such as unchecked indexing and failed unwrap operations—can still cause panic!s that crash the entire system. Existing kernel fuzzers, designed primarily for C-based kernels and reliant on KCOV, treat all crashes uniformly and fail to account for Rust-specific failure modes.
@inproceedings{paperbot11877,
title = {RusyFuzz: Unhandled Exception Guided Fuzzing for Rust OS Kernel},
author = {Yuwei Liu and Yanhao Wang and Minghua Wang and Lin Huang and Purui Su and Tao Wei},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3744916.3773138}
}