Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

coverage script panics #26

Open
Ollrogge opened this issue Jan 17, 2025 · 0 comments
Open

coverage script panics #26

Ollrogge opened this issue Jan 17, 2025 · 0 comments

Comments

@Ollrogge
Copy link

Ollrogge commented Jan 17, 2025

The coverage.go file will panic when the go-fuzz-headers functions can not translate an input.
E.g. for a byte input:

case "[]uint8", "[]byte":
			randBytes, err := fuzzConsumer.GetBytes()
			if err != nil {
				panic(err)
			}
			fmt.Fprintf(&b, "[]byte(%q)", string(randBytes))

Since LibFuzzer generates random inputs, especially at the beginning, there is no guarantee that all corpus entries will have a valid format. This may result in panics when attempting to transform the corpus into the native format using the libFuzzerSeedToGoSeed function.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant