kc3-lang/libxml2/fuzz/regexp.c
Branch :
Log
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
 |
c6c6d8af | 2024-12-11 16:24:23 | fuzz: Mutate fuzz data chunks separately Implement a custom mutator that takes a list of fixed-size chunks which are mutated with a given probability. This makes sure that values like parser options or failure position are mutated regularly even as the fuzz data grows large. Values can also be adjusted temporarily to make the fuzzer focus on failure injection, for example. Thanks to David Kilzer for the idea. | |
|
9f652e57 | 2024-11-25 19:41:33 | fuzz: Inject IO failures We use the same counter for injecting malloc and IO failures. This mostly renames several functions and variables. | |
|
780e432a | 2024-06-11 16:58:09 | fuzz: Move to per-context error handler | |
|
1a354d5b | 2023-12-10 17:09:45 | regexp: Report malloc failures Fix places where malloc failures aren't reported. | |
|
b7d56ef7 | 2023-09-22 17:03:56 | malloc-fail: Report malloc failure in xmlRegEpxFromParse Also check whether malloc failures are reported when fuzzing. | |
|
f98fa863 | 2023-09-22 15:25:40 | regexp: Fix status codes and handle invalid UTF-8 Fixes #561. | |
|
42322eba | 2023-03-08 13:59:03 | fuzz: Inject random malloc failures Fixes #344. | |
|
d0ab5c4f | 2022-09-02 17:47:48 | Fix compiler warnings in fuzzing code | |
|
85c817a2 | 2021-02-22 21:28:21 | Improve fuzzer stability - Add more calls to xmlInitializeCatalog. - Call xmlResetLastError after fuzzing each input. | |
|
9086988f | 2020-12-16 15:41:52 | Enforce maximum length of fuzz input Remove the libfuzzer max_len option which doesn't apply to other fuzzing engines. Enforce the maximum length directly in the fuzz targets. For the xml target, lower the maximum when expanding entities to avoid timeout and OOM errors. | |
|
905820a4 | 2020-07-12 22:59:39 | Update fuzzing code - Shorten timeouts - Align options from Makefile and options files - Add section headers to Makefile - Skip invalid UTF-8 in regexp fuzzer - Update regexp.dict - Generate HTML seed corpus in correct format | |
|
00ed736e | 2020-06-05 12:49:25 | Add a couple of libFuzzer targets - XML fuzzer Currently tests the pull parser, push parser and reader, as well as serialization. Supports splitting fuzz data into multiple documents for things like external DTDs or entities. The seed corpus is built from parts of the test suite. - Regexp fuzzer Seed corpus was statically generated from test suite. - URI fuzzer Tests parsing and most other functions from uri.c. |