[prev in list] [next in list] [prev in thread] [next in thread] 

List:       zlib-devel
Subject:    [Zlib-devel] Adding fuzz testing
From:       jrnieder () gmail ! com (Jonathan Nieder)
Date:       2017-11-03 20:55:47
Message-ID: 20171103205547.oot6qjun3jato5fc () aiede ! mtv ! corp ! google ! com
[Download RAW message or body]

Hi,

Chris Blume wrote:

> I am currently adding fuzz testing to all of zlib's public APIs.
> inflate() and deflate() are in. More are coming.
> You can follow the progress here
> <https://bugs.chromium.org/p/chromium/issues/detail?id=779647>.
>
> These fuzz tests will be continuously running on Chromium's testing bots.
>
> The purpose of fuzz testing is to mutate input parameters and explore for a
> difference in behavior, which might indicate a bug.
>
> I'll create a pull request on github once the fuzz tests are polished a
> bit. And if it finds any bugs, I'll upstream those patches as well.

Yay!  Thanks for doing this --- it is a huge comfort to have fuzz
tests in place when working with a library like this one that needs to
handle untrusted input.

Jonathan



[prev in list] [next in list] [prev in thread] [next in thread]