Init support userver with honggfuzz
Added support for the userver web asynchronous framework. I used only honggfuzz engine because it's pretty hard to write a fuzz test for another engine, should to patch a lot of in framework.
This framework dont use any custom parsers, under the hood it used llhttp as http req parser, rapidjson for json processing. Therefore, I used hungfuzz to cover all the functionality, rather than just some of the individual functions/parsers that are already covered by oss-fuzz
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).
View this failed invocation of the CLA check for more information.
For the most up to date status, view the checks section at the bottom of the pull request.
pavkir is integrating a new project:
- Main repo: https://github.com/userver-framework/userver.git
- Criticality score: 0.55404
Are you a maintainer of the project? If not, please do coordinate this with maintainers. It would also be preferred to have fuzzing harnesses upstream if possible.
Hi, thanks for your reply. No, I'm not the maintainer of this project, just an active user. And I support active communication with the maintainer. cc, @apolukhin - the main maintainer of this project. In the primary_contact field I set Anton's email.
I support active communication with the maintainer. cc, @apolukhin - the main maintainer of this project
I confirm that I'm the maintainer of the userver project and confirm that https://github.com/pavkir helps me here
@DavidKorczynski Hi! Could u please restart tests?
@DavidKorczynski Could you please re-run the CI job when you get a chance?
Added support for the userver web asynchronous framework. I used only honggfuzz engine because it's pretty hard to write a fuzz test for another engine, should to patch a lot of in framework.
This framework dont use any custom parsers, under the hood it used llhttp as http req parser, rapidjson for json processing. Therefore, I used hungfuzz to cover all the functionality, rather than just some of the individual functions/parsers that are already covered by oss-fuzz
I'm not sure this will work, oss-fuzz sort of requires libfuzzer. What do you mean it's hard to build for libfuzzer?
Hi @jonathanmetzman, I’ve fixed the issue with the build process. Could you please rerun the CI?