Comment by wyldfire

afl-fuzz is pretty powerful, no doubt.

But beyond dynamic analysis, someone wrote a static analysis feature to find heartbleed as well: https://github.com/awruef/find-heartbleed