feat: switch to Go fuzzing

moov-io · Aug 11, 2023 · 660f949 · 660f949
1 parent a4b8599
commit 660f949
Show file tree

Hide file tree

Showing 14 changed files with 55 additions and 698 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.20 as builder
+FROM golang:1.21 as builder
 WORKDIR /src
 ARG VERSION
 

diff --git a/Dockerfile-fuzz b/Dockerfile-fuzz
diff --git a/README.md b/README.md
@@ -182,7 +182,7 @@ We maintain a comprehensive suite of unit tests and recommend table-driven testi
 
 ### Fuzzing
 
-We currently run fuzzing over ImageCashLetter in the form of a [`moov/bai2`](https://hub.docker.com/r/moov/bai2fuzz) Docker image. You can [read more](./test/fuzz-reader/README.md) or run the image and report crasher examples to [`security@moov.io`](mailto:security@moov.io). Thanks!
+We currently run fuzzing over ACH in the form of a [Github Action](https://github.com/moov-io/ach/actions/workflows/fuzz.yml). Please report crashes examples to [`oss@moov.io`](mailto:oss@moov.io). Thanks!
 
 ## Related projects
 As part of Moov's initiative to offer open source fintech infrastructure, we have a large collection of active projects you may find useful:

diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/moov-io/bai2
 
-go 1.19
+go 1.21
 
 require (
 	github.com/go-kit/log v0.2.1

diff --git a/makefile b/makefile
@@ -46,16 +46,12 @@ endif
 teardown:
 	-docker-compose down --remove-orphans
 
-docker: update docker-hub docker-fuzz
+docker: update docker-hub
 
 docker-hub:
 	docker build --pull --build-arg VERSION=${VERSION} -t moov/bai2:${VERSION} -f Dockerfile .
 	docker tag moov/bai2:${VERSION} moov/bai2:latest
 
-docker-fuzz:
-	docker build --pull -t moov/bai2fuzz:$(VERSION) . -f Dockerfile-fuzz
-	docker tag moov/bai2fuzz:$(VERSION) moov/bai2fuzz:latest
-
 docker-push:
 	docker push moov/bai2:${VERSION}
 	docker push moov/bai2:latest

diff --git a/test/fuzz-reader/README.md b/test/fuzz-reader/README.md
diff --git a/test/fuzz-reader/corpus/sample1.txt b/test/fuzz-reader/corpus/sample1.txt
diff --git a/test/fuzz-reader/corpus/sample2.txt b/test/fuzz-reader/corpus/sample2.txt
diff --git a/test/fuzz-reader/corpus/sample3.txt b/test/fuzz-reader/corpus/sample3.txt