"A plain fuzzer can miss a program that returns wrong answers without crashing because the checker needs a way to determine what the correct output should be."
Barr and colleagues survey the test oracle problem, the challenge of determining whether observed program behavior matches the intended behavior. Their analysis explains why generating inputs or observing successful execution is not equivalent to verifying the correctness of outputs.
View Source