SQLancer

Implements multiple research-backed techniques like TLP, NoREC, and DQP to detect deep logic bugs in DBMSs, as documented in peer-reviewed papers from venues like OOPSLA and SIGMOD.

Supports over 20 DBMSs including SQLite, PostgreSQL, and MySQL, with embedded systems like DuckDB requiring no separate installation due to included JAR dependencies.

Generates syntactically valid SQL with both unguided and feedback-guided approaches (e.g., QPG), enabling comprehensive test input generation for schemas, data, and queries.

Uses Cardinality Estimation Restriction Testing (CERT) to identify potential performance bugs by analyzing estimated query cardinalities, specifically for TiDB, CockroachDB, and MySQL.