Skip to content

fuzzdiff 0.2.0

Latest
Latest

Choose a tag to compare

View all tags
@samiali38183 samiali38183 released this 11 Nov 14:25
v0.2.0
6ec1e6e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.2.0

  • Three-way differential: httparse 1.10.1 is a third oracle. Disagreement classes between picohttpparser, the Rust port and httparse are documented with RFC 9112 / 9110 / 3986 references, listed with minimal examples, generated by a committed script, and pinned by a test (docs/DIFFERENTIAL_HTTPARSE.md). A 2,000,000-input sweep found 0 differences between picohttpparser and the port, and no disagreement with httparse outside the documented classes.
  • Two more named mutants (chunk overhead ratio, response status guard) with targeted cases; 5 of 5 seeded bugs are detected.
  • Miri job for the pure-Rust crate (13 tests pass, no undefined behaviour reported; the C code and FFI harness are out of scope).
  • Fuzzing: SSE4.2 legs for the diff and c_only targets, corpus cached between runs, weekly run lengthened to 3600 s per leg.
  • README states exactly what "matches picohttpparser" means and its limits. No change to the parser's behaviour or public API.

Full changelog: CHANGELOG.md. CI: https://github.com/samiali38183/fuzzdiff/actions/runs/43037960324

Assets 2
Loading