fuzz-introspector
fuzz-introspector copied to clipboard
Python target integration
Integrate support for Python fuzzing.
Roughly, the steps:
- Add a set of test cases such that once these are analysed properly we have basic support for python
- Add static analysis part to cover the basic data needed by the post-processing. In this context use a (modified) version of https://github.com/vitsalis/PyCG
- Add support for extracting the static data on a project-wide level
- Demonstrate basic capabilities of fuzz-introspector excluding runtime coverage information
- Add runtime coverage features, using the coverage approach from OSS-Fuzz
- Demonstrate full end-to-end features
- Cleanup/refactor to ensure datastructures neatly fit the existing fuzz-introspector implementation
The current state is:
This is from pyyaml
OSS-Fuzz project run by way of https://github.com/ossf/fuzz-introspector/blob/main/oss_fuzz_integration/run_both.sh
Example using it on idna
:
glom
:
Python is now working in general. Closing this and will make more specific issues for further Python work.