Fuzzing PostgreSQL | POSETTE: An Event for Postgres 2026

From the creator

Take a closer look at fuzzing in PostgreSQL. Adam Wolk (Microsoft) presents his talk “Fuzzing PostgreSQL” at POSETTE: An Event for Postgres 2026. Abstract: Fuzzing is a simple but powerful technique for discovering edge-case bugs in large, stateful systems like PostgreSQL. This talk shows how to apply it to Postgres’ client library libpq which handles every network connection before the server sees a query. We’ll walk through building minimal harnesses, generating and mutating protocol inputs, and reasoning about what makes fuzzing effective on complex C codebases. The session is meant as a practical guide: how to start fuzzing a Postgres-related project, what challenges to expect, and what kind of issues you can realistically uncover along the way. In this session you will learn: * what fuzzing is and why it finds bugs other techniques miss * which PostgreSQL surfaces make good fuzzing targets and why * how to apply fuzzing to Postgres networking components (libpq) If you’re a PostgreSQL developer, this talk will add another tool for improving the stability and security of the projects you build. Adam Wolk is an openBSD developer interested in database engineering, distributed systems, information security & networking. Adam is an experienced team leader who has developed systems from the ground up from C on ARM devices, through back-end systems in Go, Python and Rails to web front ends in modern JavaScript frameworks - all continuously integrated, deployed and monitor

Published 2026-06-16 · Watch on YouTube ↗
Availability and playback restrictions are controlled by the original channel.