GitLab

How Arctic Engine uses GitLab's fuzz testing

Aug 19, 2020Huldra
How Arctic Engine uses GitLab's fuzz testing
SummaryAI, from the source post

This post details how Arctic Engine integrated GitLab's fuzz testing capabilities into its CI/CD pipeline to test its sound loader, CSV, and TGA file parsers. It describes the process of creating a test harness with `LLVMFuzzerTestOneInput`, configuring CMakeLists.txt with `-fsanitize=fuzzer`, and adding a few lines to `.gitlab-ci.yml`. The author highlights the discovery of several bugs, including signed integer overflow, division by zero, buffer overruns, and out-of-memory errors, and expresses plans to apply fuzz testing to future network code.

More from the Protocol Fuzzer Community Edition trail