OSS2026-08-28 · source-backed

A "vibecoded fuzzer" FFmpeg bug reached 268 HN points, and neither the report nor the fuzzer claims AI involvement.

Issue

2026-08-28

Confidence

source-backed

Sources

Redaction

redacted

Story

Darío Clavijo reported an integer divide-by-zero in FFmpeg's Sony PS2 VPK demuxer, where a malformed header sets nb_channels to 0 and a 21-byte crafted input triggers SIGFPE deterministically (FFmpeg). The fuzzer took 495,211 executions over about 10 hours 43 minutes to find it, and maintainer Jun Zhao merged the fix. The HN submission titled it a vibecoded fuzzer, but the issue text makes no AI claim and the fuzzer's README describes 1,190 commits of conventional Markov-generation and coverage-guided work. Read the repo before you cite the headline.

Source trail

FFmpeg More from code.ffmpeg.org

Entities

Clavijo FFmpeg Jun Zhao Markov README SIGFPE Sony PS2 VPK

Provenance

Canonical issue: Ramsay Research Agent — August 28, 2026
AI generated: no
Story unit: 2026-08-28-a-vibecoded-fuzzer-ffmpeg-bug-reached-268-hn-points-and-neither-the-report-nor-the-fuzzer-claims
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

A "vibecoded fuzzer" FFmpeg bug reached 268 HN points, and neither the report nor the fuzzer claims AI involvement.

Story

Related stories

An HN post framed as a fired-developer revenge project put OpenExecutive at 686 points, but the repo makes no such claim.

FuXi hit 1,304 stars as a single-binary terminal coding agent, but ships under a proprietary license.

A README Edit Redirects Your Coding Agent's Installs

Architecture Descriptors Cut AI Coding Agent Navigation by 33-44%: 7,012 Claude Code Sessions Analyzed

Repos that commit an AI config file take half the complexity damage. 73.8% commit it once and never touch it again.

A stock analysis repo has 53,697 forks on 63,952 stars because the README's first instruction is "click fork."

x64dbg-MCP Server hit 318 stars on day one putting a native Windows debugger behind MCP.

KITE claims SOTA on LoCoMo and LongMemEval with no vectors and ~1.6K tokens of reader context.

Source trail

Entities

Provenance

A "vibecoded fuzzer" FFmpeg bug reached 268 HN points, and neither the report nor the fuzzer claims AI involvement.

Story

Related stories

An HN post framed as a fired-developer revenge project put OpenExecutive at 686 points, but the repo makes no such claim.

FuXi hit 1,304 stars as a single-binary terminal coding agent, but ships under a proprietary license.

A README Edit Redirects Your Coding Agent's Installs

Architecture Descriptors Cut AI Coding Agent Navigation by 33-44%: 7,012 Claude Code Sessions Analyzed

Repos that commit an AI config file take half the complexity damage. 73.8% commit it once and never touch it again.

A stock analysis repo has 53,697 forks on 63,952 stars because the README's first instruction is "click fork."

x64dbg-MCP Server hit 318 stars on day one putting a native Windows debugger behind MCP.

KITE claims SOTA on LoCoMo and LongMemEval with no vectors and ~1.6K tokens of reader context.

Source trail

Entities

Provenance