Skip to content

Commit

Permalink
test/fuzz: integrate fuzzit for continuous fuzzing
Browse files Browse the repository at this point in the history
  • Loading branch information
adamdecaf committed Aug 19, 2019
1 parent 0bff7e0 commit 19cb21a
Show file tree
Hide file tree
Showing 3 changed files with 510 additions and 1 deletion.
2 changes: 1 addition & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -24,4 +24,4 @@ openapi-generator-cli-*.jar

# fuzzing
test/fuzz-reader/fuzzreader-fuzz.zip

test/fuzz-reader/corpus/*.tar.gz
16 changes: 16 additions & 0 deletions test/fuzz-reader/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,3 +36,19 @@ drwxr-xr-x 1 root root 4096 Jan 14 17:30 ..
# Download files, replace <file> with a crasher file
$ kubectl cp 'apps/wirefuzz-6bbdc574f5-pl2zm:/go/src/github.com/moov-io/wire/test/fuzz-reader/crashers/<file>' ./
```

### fuzzit integration

[fuzzit](https://fuzzit.dev/) is a free SaaS for automated fuzzing. They offer free fuzzing for OSS projects so we've setup wirefuzz for their service. After creating a target in the web UI we copied our corpus up (`tar cf wirefuzz.tar *.txt` in `test/fuzz-reader/corpus/` then `gzip wirefuzz.tar`).

We need to then copy down their bash script (`fuzzit completion > fuzzit.sh && chmod +x ./fuzzit.sh`) and create our job:

```
# In test/fuzz-reader/
$ fuzzit create job --type=fuzzing wirefuzz fuzzit.sh
2019/08/19 10:50:59 Creating job...
2019/08/19 10:50:59 Uploading fuzzer...
2019/08/19 10:51:05 Starting job
2019/08/19 10:51:05 Job baAZGS3OQfeCEL1D6HtL started succesfully
2019/08/19 10:51:05 Job created successfully
```
Loading

0 comments on commit 19cb21a

Please sign in to comment.