Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add fuzzing by way of ClusterFuzzLite #27

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

DavidKorczynski
Copy link

@DavidKorczynski DavidKorczynski commented Dec 21, 2023

This adds fuzzing by way of ClusterFuzzLite, which is a GitHub action that will perform a short amount of fuzzing for new PRs.

I added a fuzzer that targets the parsing logic, and currently set the timeout of CFLite to 100 seconds. CFLite will flag if the fuzzer finds any issues in the code introduced by a PR.

@mcmtroffaes
Copy link
Owner

Thanks so much for your contribution! I don't know much about ClusterFuzzLite but it seems quite promising. I want to learn a bit more about it before deciding whether to merge this. The one thing to note here is that this repository rarely gets pull requests, so maybe a monthly (or maybe less) cron would make sense in addition to PR fuzzing. I'm taking a break for the next two weeks but I'll get back to this.

@mcmtroffaes
Copy link
Owner

... the other thought I had is that likely I'll want to move all testing to github actions - but this is tangential to this pull request.

@DavidKorczynski
Copy link
Author

The one thing to note here is that this repository rarely gets pull requests, so maybe a monthly (or maybe less) cron would make sense in addition to PR fuzzing.

We could add this as a follow-up? ClusterFuzzLite supports batch fuzzing which can be controlled by a cron schedule.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants