diff --git a/doc/developer.texi b/doc/developer.texi
index 7fa8179cc0..14055305c8 100644
--- a/doc/developer.texi
+++ b/doc/developer.texi
@@ -453,7 +453,8 @@ send a reminder by email. Your patch should eventually be dealt with.
     other security issues?
 @item
     Did you test your decoder or demuxer against damaged data? If no, see
-    tools/trasher and the noise bitstream filter. Your decoder or demuxer
+    tools/trasher, the noise bitstream filter, and
+    @uref{http://caca.zoy.org/wiki/zzuf, zzuf}. Your decoder or demuxer
     should not crash or end in a (near) infinite loop when fed damaged data.
 @item
     Does the patch not mix functional and cosmetic changes?