curl-fuzzer
curl-fuzzer copied to clipboard
Quality assurance testing for the curl project
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/curl/curl-fuzzer). ## Open These updates have all been...
It's been a while since I built the fuzzer and now when I run `mainline.sh` it exits in the OpenSSL build pretty quickly with this error message: ~~~ making all...
This PR implements support for building cURL with QuicTLS, ngtcp2 and nghttp3 and adds a new harness, `curl_fuzzer_http3`, that fuzzes the HTTP/3 implementation. `scripts/download_ngtcp2.sh` includes a patch that adds minimal...
Hello :) Thanks a lot for the great blog post about the recent CVE ! https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/ Just made me wonder if the SOCKS implementation was fuzzed ?
Not sure what is going on, clang is 6.0.1-9 and used often for fuzzing other projects (also for OSS-Fuzz). I naively followed the instructions (../curl was fetched from upstream a...
This PR adds some new standalone harnesses that fuzz: * Alt-Svc parsing * Base64 encoding/decoding * DoH decoding * Date parsing * (un)escaping Some of the harness code includes (from...
Hi, I compiled `curl-fuzzer` using `./mainline.sh`. I found that for some inputs, the output of`curl_fuzzer` would change per run. - Compiler: clang13 - Platform: Ubuntu 20.04.4 LTS, x86_64 - INPUT:...
Hi there, I compiled `curl-fuzzer` using `./mainline.sh` with `gcc11` and `clang13` separately. I found that for some inputs, the two compiled `curl_fuzzer` would emit different results. - Compiler: gcc11 and...
Hi! I have played around with the fuzzers and have several variations and new fuzzers on my private repo. I wanted to file an issue here to have a discussion...