History

Paulo Gomes 5b371de9ea fuzz: Fix upstream build The upstream build is failing with: /usr/local/bin/compile_native_go_fuzzer: line 35: addimport: command not found The changes uses the upstream approach to install the missing commands. Note that one of the reasons of the unilateral failure upstream is due to the base image changed in: `e71e320709` Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>		2022-09-02 15:59:53 +01:00
..
Dockerfile.builder	fuzz: Fix upstream build	2022-09-02 15:59:53 +01:00
README.md	Refactor fuzzing	2022-01-17 20:45:16 +00:00
native_go_run.sh	fuzz: Refactor Fuzz tests based on Go native fuzzing.	2022-08-22 16:16:28 +01:00
oss_fuzz_build.sh	fuzz: Fix upstream build	2022-09-02 15:59:53 +01:00
oss_fuzz_run.sh	Refactor fuzzing	2022-01-17 20:45:16 +00:00

README.md

fuzz testing

Flux is part of Google's oss fuzz program which provides continuous fuzzing for open source projects.

The long running fuzzing execution is configured in the oss-fuzz repository. Shorter executions are done on a per-PR basis, configured as a github workflow.

For fuzzers to be called, they must be compiled within oss_fuzz_build.sh.

Testing locally

Build fuzzers:

make fuzz-build

All fuzzers will be built into ./build/fuzz/out.

Smoke test fuzzers:

make fuzz-smoketest

The smoke test runs each fuzzer once to ensure they are fully functional.

Run fuzzer locally:

./build/fuzz/out/fuzz_conditions_match

Run fuzzer inside a container:

	docker run --rm -ti \
		-v "$(pwd)/build/fuzz/out":/out \
		gcr.io/oss-fuzz/fluxcd \
		/out/fuzz_conditions_match