packageurl-go
packageurl-go copied to clipboard
Published
20 hours ago •
package-url
package-url
Add simple fuzz test
Signed-off-by: Jason Hall [email protected]
This adds a simple Go fuzz test that checks for inputs that cause FromString to panic. Returned errors are not considered interesting fuzzing inputs, only inputs that panic.
The result is output in testdata/fuzz/FuzzFromString that cause FromString to panic, among them, the string "0", and "?A".
We should fix these panics so that these inputs don't panic, then add them to the repo so that future fuzz attempts know to start with those inputs when generating new potentially interesting inputs.
