Add fuzzing test for libhttpserver and submit to oss-fuzz by sgbhat2 · Pull Request #213 · etr/libhttpserver · GitHub
Conversation
Add fuzz target for HTTP server using libFuzzer. The fuzz target
sends HTTP request to server using the fuzzed input from libFuzzer.
Add fuzz target and corpus for testing ip_representation() API
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Footer
You can’t perform that action at this time.
Requirements for Adding the fuzzing test
Fuzzing is a well-known technique to unravel security vulnerabilities and programming errors in the code.
This PR is aimed to add fuzz tests to libhttpserver using LLVM's LibFuzzer with a goal to integrate libhttpserver to oss-fuzz.
Issue or RFC Endorsed by Maintainers
bcd12d3 --> This bug was found from the fuzz testing.
Description of the Change
Following changes are made following the oss-fuzz guide
The fuzz targets are not integrated with the build system of the library. Instructions to build and run the fuzz targets are mentioned in the README.md
Alternate Designs
N/A
Possible Drawbacks
N/A
Verification Process
The fuzz target is locally built and verified to run by following these steps
Release Notes