Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fuzzing for XCM & Integration Tests #647

Open
ghzlatarev opened this issue Jul 6, 2022 · 3 comments
Open

Fuzzing for XCM & Integration Tests #647

ghzlatarev opened this issue Jul 6, 2022 · 3 comments
Assignees
Labels
A-security Area: Issues and PRs related to Security A-testing Area: Testing-related Issues and PRs C-experiment Category: Experimental feature or tool P-medium Priority: Medium P-released Product: already released product related features
Milestone

Comments

@ghzlatarev
Copy link
Contributor

ghzlatarev commented Jul 6, 2022

Adding a degree of randomization in Manta's testing can be beneficial to catch more bugs.
Use manta-pay's test randomization as reference.

@ghzlatarev ghzlatarev added the P-high Priority: High label Jul 6, 2022
@ghzlatarev ghzlatarev added this to the Future milestone Jul 6, 2022
@ghzlatarev ghzlatarev mentioned this issue Jul 6, 2022
9 tasks
@Garandor Garandor added the C-experiment Category: Experimental feature or tool label Jul 14, 2022
@Garandor Garandor modified the milestones: Future, v3.3.0 Jul 14, 2022
@Garandor Garandor added P-medium Priority: Medium and removed P-high Priority: High labels Jul 14, 2022
@Garandor
Copy link
Contributor

Check out what Brandon did in manta-pay pallet ( manual randomization, no framework )

@stechu stechu modified the milestones: v3.3.0, Future, v3.4.0 Jul 18, 2022
@Garandor Garandor modified the milestones: v3.4.0, Future Sep 9, 2022
@Dengjianping
Copy link
Contributor

Dengjianping commented Sep 14, 2022

Maybe we can try this tool https://github.com/rust-fuzz/cargo-fuzz
Seems it's a solid tool which is being used by like wasmtime.
And lots of bugs are found by it: https://github.com/rust-fuzz/trophy-case

Here's the doc: https://rust-fuzz.github.io/book/introduction.html

There's another alternative for fuzzing test: https://crates.io/crates/honggfuzz

@Dengjianping
Copy link
Contributor

And seems substrate has some ideas on fuzzing test.
paritytech/polkadot-sdk#251

@ghzlatarev ghzlatarev added A-security Area: Issues and PRs related to Security A-testing Area: Testing-related Issues and PRs P-released Product: already released product related features labels Jun 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-security Area: Issues and PRs related to Security A-testing Area: Testing-related Issues and PRs C-experiment Category: Experimental feature or tool P-medium Priority: Medium P-released Product: already released product related features
Projects
None yet
Development

No branches or pull requests

5 participants