A couple of days later than I said, sorry: your fuzzing suggestion is in v0.2.2-alpha. tests/fuzz has libFuzzer + ASan/UBSan harnesses for the whole image path, quirc_decode and the QR type detection, with quirc built exactly as the ROM builds it. In its first seconds it found undefined behaviour in quirc (nothing out of bounds), now fixed. After that, 30 minutes per harness came back clean. The image harness is slow, so longer runs are welcome: make -C tests/fuzz run.

bitdevs

I published a threat model for a SeedSigner on a Nintendo DSi. Tear it apart.

ndssigner

A couple of days later than I said, sorry: your fuzzing suggestion is in v0.2.2-alpha. tests/fuzz has libFuzzer + ASan/UBSan harnesses for the whole image path, quirc_decode and the QR type detection, with quirc built exactly as the ROM builds it. In its first seconds it found undefined behaviour in quirc (nothing out of bounds), now fixed. After that, 30 minutes per harness came back clean. The image harness is slow, so longer runs are welcome: make -C tests/fuzz run.

Thanks again for the review.

[https://github.com/ndssigner/nds-signer/releases/tag/v0.2.2-alpha](https://github.com/ndssigner/nds-signer/releases/tag/v0.2.2-alpha)