types/alpine: add fuzzer #1200
types/alpine: add fuzzer #1200
Conversation
Signed-off-by: AdamKorcz <adam@adalogics.com>
| return | ||
| } | ||
| p := &Package{} | ||
| p.Unmarshal(bytes.NewReader(tarBytes)) |
There was a problem hiding this comment.
Unmarshal assumes a concatenation of 3 tar.gz files with some headers removed... so is just TarBytes() the correct input to be passing?
Line 107 in 21e5b63
There was a problem hiding this comment.
Good point. I would say it is good enough to get started since the fuzzer does not do any assertions to assess whether the function behaves correctly. I tested this locally, and it does get into the file readings of the tar archives which is great.
Wrt to leaving out the footers, I will add that as an option in go-fuzz-headers.
I plan to iterate over the fuzzer based on the feedback from OSS-Fuzz. If we get a lot of false crashes, then we can modify.
Codecov Report
@@ Coverage Diff @@
## main #1200 +/- ##
===========================================
- Coverage 64.22% 41.99% -22.24%
===========================================
Files 82 74 -8
Lines 7625 7206 -419
===========================================
- Hits 4897 3026 -1871
- Misses 2100 3871 +1771
+ Partials 628 309 -319
Flags with carried forward coverage won't be shown. Click here to find out more.
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. |
Signed-off-by: AdamKorcz adam@adalogics.com
Summary
Adds a fuzz test for the unmarshalling of the Apk type.