Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Found multiple crashes using fuzzing #8

Closed
Nereuxofficial opened this issue Aug 15, 2021 · 5 comments
Closed

Found multiple crashes using fuzzing #8

Nereuxofficial opened this issue Aug 15, 2021 · 5 comments
Assignees
Milestone

Comments

@Nereuxofficial
Copy link
Contributor

Nereuxofficial commented Aug 15, 2021

I fuzzed this crate using honggfuzz and found 3 crashes.

You can fuzz the code yourself and further investigate the crashes with this repo.

In the main function there are also three test functions which can be used to easily reproduce the crashes. If you go into the hfuzz_workspace/Fuzzing Folder you can also see the inputs that crash.

This could help improve the check_preconditions function and i hope this is useful.

@bertiqwerty
Copy link
Owner

bertiqwerty commented Aug 15, 2021

Thanks for report. Interesting. I haven't thought about using fuzzying yet.

The strings reported are

  • (nc7)sqrtE
  • fi.g
  • xo-17-(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((expWW-tr-3746-4+sinnex-nn--nnexpWW-tr-7492-4+4-nsqrnexq+---------282)-384

@bertiqwerty bertiqwerty self-assigned this Aug 15, 2021
@bertiqwerty bertiqwerty added this to the v0.9.0 milestone Aug 15, 2021
@Nereuxofficial
Copy link
Contributor Author

Through further fuzzing i found some more crashes.
Would it be okay if i forked the project and made a PR to have fuzzing built into the Project?

@bertiqwerty
Copy link
Owner

Do you mean a fuzzing test and an additional dev-dependency for the fuzzing lib?

@Nereuxofficial
Copy link
Contributor Author

Nereuxofficial commented Aug 16, 2021

Yup. It would be in a fuzz/ folder similar to this crate.
Note that it's not a dev-dependency and only compiled when someone actually wants to fuzz the crate

@bertiqwerty
Copy link
Owner

Yes, sure. Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants