Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add fuzzing #204

Open
daxmc99 opened this issue Jan 20, 2020 · 2 comments
Open

Add fuzzing #204

daxmc99 opened this issue Jan 20, 2020 · 2 comments

Comments

@daxmc99
Copy link

daxmc99 commented Jan 20, 2020

SQLite has fuzzing integrated into it. See https://www.sqlite.org/src/artifact/ad79e867fb504338
I think DQLite would also benefit from fuzzing. Is there any interest in adding this to the project?

If so, would OSS-Fuzz be a candidate fuzzing tool?

Just looking to start the discussion if there is interest in adding fuzzing to this project

@freeekanayaka
Copy link
Contributor

Whatever increase testing is welcome. Whether fuzzing and OSS-Fuzz is the best choice at this stage of dqlite's life I'm not really sure, in the sense that I would probably not work on that myself right now since I have other priorities, however contributions are welcome (as long as they only or mainly use the public API and don't reply on the internal implementation).

@cole-miller
Copy link
Contributor

I've got a very basic fuzzing target running locally: it stands up a single dqlite_node and feeds the fuzzer's input into the client side of the socket that's connected to the server. I found a couple of crashes with afl-fuzz (#465, #466), but I think that particular target is just too slow to get a satisfying yield of bugs. I'm experimenting with ways to make it faster.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants