-
Notifications
You must be signed in to change notification settings - Fork 335
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Slicing error found by afl.rs #654
Comments
I've fixed the immediate issue in #655, but with URLs like this it looks like there are still some issues. For example, in the newly added tests, the before and after URLs don't have the same string representation:
(It looks like |
I put more inputs that may cause same crash on https://github.com/StevenJiang1110/afl_rust_crashes/tree/main/url |
Thank you for doing the fuzzing, it's very valuable to have someone do the work on this. Ideally we'd commit it to the repository so that we can run it again in the future after making changes, is that something you'd be able to work on? |
I'm now working on developing a tool to automatically generate fuzz drivers to cover all public method of a crate to find crashes. But the result is far more than ideal, for example, there are too many duplicated drivers which are a waste of processing power. I will issue an PR about all fuzz drivers until I finished this work(It doesn't take a long time, maybe several weeks). Thanks. |
I've used afl.rs to heavily test url2.2.0, and some slicing error may occured when specific input is provided.
To replay the panic, the test code is
I also placed the replay file at https://github.com/StevenJiang1110/afl_rust_crashes/tree/main/url/replay_url40
I hope you will check if this is an actually bug. Thanks a lot.
The simple bug report is like this.
The text was updated successfully, but these errors were encountered: