Fuzzing: Add 3 fuzzers

configuration/fuzz.go

@@ -0,0 +1,16 @@
+// +build gofuzz
+
+package configuration
+
+import (
+	"bytes"
+)
+
+// ParserFuzzer implements a fuzzer that targets Parser()
+// Export before building
+// nolint:deadcode
+func parserFuzzer(data []byte) int {
+	rd := bytes.NewReader(data)
+	_, _ = Parse(rd)
+	return 1
+}

reference/fuzz.go

@@ -0,0 +1,12 @@
+// +build gofuzz
+
+package reference
+
+// fuzzParseNormalizedNamed implements a fuzzer
+// that targets ParseNormalizedNamed
+// Export before building the fuzzer.
+// nolint:deadcode
+func fuzzParseNormalizedNamed(data []byte) int {
+	_, _ = ParseNormalizedNamed(string(data))
+	return 1
+}

registry/api/v2/fuzz.go

@@ -0,0 +1,12 @@
+// +build gofuzz
+
+package v2
+
+// FuzzParseForwardedHeader implements a fuzzer
+// that targets parseForwardedHeader
+// Export before building
+// nolint:deadcode
+func fuzzParseForwardedHeader(data []byte) int {
+	_, _, _ = parseForwardedHeader(string(data))
+	return 1
+}

script/oss_fuzz_build.sh

@@ -0,0 +1,9 @@
+#!/bin/bash -eu
+
+sed 's/parserFuzzer/ParserFuzzer/g' -i ./configuration/fuzz.go
+sed 's/fuzzParseNormalizedNamed/FuzzParseNormalizedNamed/g' -i ./reference/fuzz.go
+sed 's/fuzzParseForwardedHeader/FuzzParseForwardedHeader/g' -i ./registry/api/v2/fuzz.go
+
+compile_go_fuzzer github.com/distribution/distribution/v3/configuration ParserFuzzer parser_fuzzer
+compile_go_fuzzer github.com/distribution/distribution/v3/reference FuzzParseNormalizedNamed fuzz_parsed_normalized_named
+compile_go_fuzzer github.com/distribution/distribution/v3/registry/api/v2 FuzzParseForwardedHeader fuzz_parse_forwarded_header