Add fuzzing

.github/workflows/build.yaml

@@ -12,13 +12,22 @@ jobs:
   lint:
     name: Lint code
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python:
+          - "3.10"
+          - "3.11"
+          - "3.12"
+          - "3.13"
+          - "3.14"
     steps:
       - name: Checkout the Git repository
         uses: actions/checkout@v4
       - name: Setup Python
         uses: actions/setup-python@v5
         with:
-          python-version: 3.14
+          python-version: ${{ matrix.python }}
           cache: "pip"
       - name: Lint code
         shell: bash
@@ -82,6 +91,30 @@ jobs:
       - name: Run test
         shell: bash
         run: make test
+  fuzz:
+    name: Fuzz
+    runs-on: ubuntu-latest
+    needs: [test-image]
+    strategy:
+      fail-fast: false
+      matrix:
+        python:
+          #- "3.10"  # atheris appears to break
+          - "3.11"
+          - "3.12"
+          - "3.13"
+          #- "3.14" # not supported by atheris yet
+    steps:
+      - name: Checkout the Git repository
+        uses: actions/checkout@v4
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+          cache: "pip"
+      - name: Run test
+        shell: bash
+        run: make fuzz
   build:
     name: Build pip package
     runs-on: ubuntu-latest
@@ -106,7 +139,7 @@ jobs:
   publish:
     name: Publish to PyPi
     if: github.repository == 'Eeems/python-ext4' && github.event_name == 'release' && startsWith(github.ref, 'refs/tags')
-    needs: [build]
+    needs: [build, fuzz]
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -128,7 +161,7 @@ jobs:
   release:
     name: Add pip to release
     if: github.repository == 'Eeems/python-ext4' && github.event_name == 'release' && startsWith(github.ref, 'refs/tags')
-    needs: [build]
+    needs: [build, fuzz]
     runs-on: ubuntu-latest
     permissions:
       contents: write

.gitignore

@@ -161,3 +161,6 @@ cython_debug/
 
 *.ext4
 *.ext4.tmp
+crash-*
+timeout-*
+corpus/seed/

Makefile

@@ -3,7 +3,6 @@ VERSION := $(shell grep -m 1 version pyproject.toml | tr -s ' ' | tr -d "'\":" |
 PACKAGE := $(shell grep -m 1 name pyproject.toml | tr -s ' ' | tr -d "'\":" | cut -d' ' -f3)
 
 OBJ := $(wildcard ${PACKAGE}/**)
-OBJ += requirements.txt
 OBJ += pyproject.toml
 OBJ += README.md
 OBJ += LICENSE
@@ -19,75 +18,106 @@ else
 	endif
 endif
 
-ifeq ($(PYTHON),)
-PYTHON := python
+ifeq ($(FUZZ_TIMEOUT),)
+FUZZ_TIMEOUT := 60
 endif
 
+.PHONY: clean
 clean:
 	git clean --force -dX
 
+.PHONY: build
 build: wheel
 
+.PHONY: release
 release: wheel sdist
 
+.PHONY: sdist
 sdist: dist/${PACKAGE}-${VERSION}.tar.gz
 
+.PHONY: wheel
 wheel: dist/${PACKAGE}-${VERSION}-py3-none-any.whl
 
 dist:
 	mkdir -p dist
 
 dist/${PACKAGE}-${VERSION}.tar.gz: ${VENV_BIN_ACTIVATE} dist $(OBJ)
 	. ${VENV_BIN_ACTIVATE}; \
-	$(PYTHON) -m build --sdist
+	python -m build --sdist
 
 dist/${PACKAGE}-${VERSION}-py3-none-any.whl: ${VENV_BIN_ACTIVATE} dist $(OBJ)
 	. ${VENV_BIN_ACTIVATE}; \
-	$(PYTHON) -m build --wheel
+	python -m build --wheel
 
-${VENV_BIN_ACTIVATE}: requirements.txt
+${VENV_BIN_ACTIVATE}: pyproject.toml
 	@echo "Setting up development virtual env in .venv"
-	$(PYTHON) -m venv .venv
+	python -m venv .venv
 	. ${VENV_BIN_ACTIVATE}; \
-	$(PYTHON) -m pip install \
-	  wheel \
-	  build \
-	  ruff \
-	  basedpyright; \
-	$(PYTHON) -m pip install \
-	    -r requirements.txt
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	  .[dev];
 
+.PHONY: test
 test: ${VENV_BIN_ACTIVATE}
+	@. ${VENV_BIN_ACTIVATE}; \
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	  .[test];
 	$(SHELL) test.sh
 
+.PHONY: fuzz
+fuzz: ${VENV_BIN_ACTIVATE}
+	@. ${VENV_BIN_ACTIVATE}; \
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	  .[fuzz]
+	. ${VENV_BIN_ACTIVATE};\
+	python fuzz.py \
+	  -rss_limit_mb=2048 \
+	  -max_total_time=$(FUZZ_TIMEOUT)
+
+.PHONY: all
 all: release
 
-lint: $(VENV_BIN_ACTIVATE)
+.PHONY: lint
+lint: $(VENV_BIN_ACTIVATE);
+	@. ${VENV_BIN_ACTIVATE}; \
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	    .[test]; \
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	    .[fuzz]
 	. $(VENV_BIN_ACTIVATE); \
-	$(PYTHON) -m ruff check; \
-	$(PYTHON) -m basedpyright
-
-lint-fix: $(VENV_BIN_ACTIVATE)
+	python -m ruff check; \
+	python -m basedpyright
+
+.PHONY: lint-fix
+lint-fix: $(VENV_BIN_ACTIVATE); \
+	@. ${VENV_BIN_ACTIVATE}; \
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	    .[test]; \
+	python -m pip install \
+	  --require-virtualenv \
+	  --editable \
+	    .[fuzz]
 	. $(VENV_BIN_ACTIVATE); \
-	$(PYTHON) -m ruff check --fix; \
-	$(PYTHON) -m basedpyright
+	python -m ruff check --fix; \
+	python -m basedpyright
 
+.PHONY: format
 format: $(VENV_BIN_ACTIVATE)
 	. $(VENV_BIN_ACTIVATE); \
-	$(PYTHON) -m ruff format --diff
+	python -m ruff format --diff
 
+.PHONY: format-fix
 format-fix: $(VENV_BIN_ACTIVATE)
 	. $(VENV_BIN_ACTIVATE); \
-	$(PYTHON) -m ruff format
-
-.PHONY: \
-	all \
-	build \
-	clean \
-	sdist \
-	wheel \
-	test \
-	lint \
-	lint-fix \
-	format \
-	format-fix
+	python -m ruff format