-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve testing #41
Comments
Setting this to higher priority since we need to provide better guards for OSS-Fuzz bumps: |
Thanks! Another idea for OSS-Fuzz integration may be to pin to a "stable" release for OSS-fuzz, and we can bump after manually verifying that a few reports on the latest revision looks OK. May not be needed if the tests are comprehensive enough though. |
Add testing set up for oss-fuzz that can automatically analyse properties against a set of projects. This is achieved by making fuzz-introspector write .json files with data about the run which is then processed by the testing framework. The testing framework has some hard-coded boundary checks on the data for a given project. It has to be boundaries rather than fixed values since the data may change from run to run depending on the fuzzing results. In order to make the check complete it needs to have hard-coded values from a diverse set of projects, in particular both c and c++ projects. Ref: ossf#41
* oss-fuzz: add proper testing set up Add testing set up for oss-fuzz that can automatically analyse properties against a set of projects. This is achieved by making fuzz-introspector write .json files with data about the run which is then processed by the testing framework. The testing framework has some hard-coded boundary checks on the data for a given project. It has to be boundaries rather than fixed values since the data may change from run to run depending on the fuzzing results. In order to make the check complete it needs to have hard-coded values from a diverse set of projects, in particular both c and c++ projects. Ref: #41
Ref #287 |
Removed priority and enhancement labels as the testing infrastructure is now at a much better place than when this issue was created. Keeping the issue open so it can be referenced in commits. |
* oss-fuzz: add proper testing set up Add testing set up for oss-fuzz that can automatically analyse properties against a set of projects. This is achieved by making fuzz-introspector write .json files with data about the run which is then processed by the testing framework. The testing framework has some hard-coded boundary checks on the data for a given project. It has to be boundaries rather than fixed values since the data may change from run to run depending on the fuzzing results. In order to make the check complete it needs to have hard-coded values from a diverse set of projects, in particular both c and c++ projects. Ref: ossf/fuzz-introspector#41
To prevent regression of: ossf/fuzz-introspector#288 Ref: ossf/fuzz-introspector#41
* oss-fuzz: add proper testing set up Add testing set up for oss-fuzz that can automatically analyse properties against a set of projects. This is achieved by making fuzz-introspector write .json files with data about the run which is then processed by the testing framework. The testing framework has some hard-coded boundary checks on the data for a given project. It has to be boundaries rather than fixed values since the data may change from run to run depending on the fuzzing results. In order to make the check complete it needs to have hard-coded values from a diverse set of projects, in particular both c and c++ projects. Ref: ossf/fuzz-introspector#41
To prevent regression of: ossf/fuzz-introspector#288 Ref: ossf/fuzz-introspector#41
We currently have some facilities to test fuzz-introspector, including:
There are room for improvements in terms of testing. This is an umbrella issue for testing improvements that commits can refer to.
The text was updated successfully, but these errors were encountered: