Add fuzzing test for libhttpserver and submit to oss-fuzz - #213
Draft
sgbhat2 wants to merge 2 commits into
Draft
Conversation
Copy link
Copy Markdown
Sorry, something went wrong.
Add fuzz target for HTTP server using libFuzzer. The fuzz target sends HTTP request to server using the fuzzed input from libFuzzer.
Copy link
Copy Markdown
Codecov Report
@@ Coverage Diff @@
## master #213 +/- ##
==========================================
+ Coverage 95.60% 95.62% +0.01%
==========================================
Files 35 35
Lines 3233 3246 +13
==========================================
+ Hits 3091 3104 +13
Misses 142 142
Continue to review full report at Codecov.
|
Sorry, something went wrong.
Add fuzz target and corpus for testing ip_representation() API
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requirements for Adding the fuzzing test
Fuzzing is a well-known technique to unravel security vulnerabilities and programming errors in the code.
This PR is aimed to add fuzz tests to libhttpserver using LLVM's LibFuzzer with a goal to integrate libhttpserver to oss-fuzz.
Issue or RFC Endorsed by Maintainers
bcd12d3 --> This bug was found from the fuzz testing.
Description of the Change
Following changes are made following the oss-fuzz guide
The fuzz targets are not integrated with the build system of the library. Instructions to build and run the fuzz targets are mentioned in the README.md
Alternate Designs
N/A
Possible Drawbacks
N/A
Verification Process
The fuzz target is locally built and verified to run by following these steps
Release Notes