Wasmtime GitHub notifications bot (Dec 01 2024 at 15:58): Wasmtime GitHub notifications bot (Dec 01 2024 at 15:58):tschneidereit added the enhancement label to Issue #9699.
Wasmtime GitHub notifications bot (Dec 01 2024 at 15:58):tschneidereit added the fuzzing label to Issue #9699.
Wasmtime GitHub notifications bot (Dec 01 2024 at 15:58):tschneidereit opened issue #9699:
Feature
Fuzz Inspector helps to gain insights into the effectiveness of a fuzzing setup and to identify blockers that keep parts of the code base uncovered.
Benefit
Wasmtime is sufficiently complex that it's challenging to reason about the effectiveness of the various fuzzing harnesses we employ. That's the very problem Fuzz Inspector was created to help address.
Implementation
Rust support was added to Fuzz Inspector very recently, so it's not yet fully documented. I think that PR contains sufficient bread crumbs to find the right path to integration with our OSS-Fuzz setup, though.
Alternatives
There might be alternative initiatives with similar goals that'd be more valuable to integrate. If so, I'm not aware of them.
Wasmtime GitHub notifications bot (Dec 01 2024 at 15:58):github-actions[bot] commented on issue #9699:
Subscribe to Label Action
cc @fitzgen
<details>
This issue or pull request has been labeled: "fuzzing"Thus the following users have been cc'd because of the following labels:
- fitzgen: fuzzing
To subscribe or unsubscribe from this label, edit the <code>.github/subscribe-to-label.json</code> configuration file.
Learn more.
</details>
Wasmtime GitHub notifications bot (Dec 01 2024 at 16:01):tschneidereit edited issue #9699:
Feature
Fuzz Introspector helps to gain insights into the effectiveness of a fuzzing setup and to identify blockers that keep parts of the code base uncovered.
Benefit
Wasmtime is sufficiently complex that it's challenging to reason about the effectiveness of the various fuzzing harnesses we employ. That's the very problem Fuzz Introspector was created to help address.
Implementation
Rust support was added to Fuzz Introspector very recently, so it's not yet fully documented. I think that PR contains sufficient bread crumbs to find the right path to integration with our OSS-Fuzz setup, though.
Alternatives
There might be alternative initiatives with similar goals that'd be more valuable to integrate. If so, I'm not aware of them.
Last updated: Dec 23 2024 at 12:05 UTC