Skip to content

Fuzzing: add libFuzzer targets for QUIC packet and transport parameter parsing - #147

Open
rpaulo wants to merge 1 commit into
apple:mainfrom
rpaulo:fuzzer
Open

rpaulo wants to merge 1 commit into
apple:mainfrom
rpaulo:fuzzer

Conversation

@rpaulo

@rpaulo rpaulo commented Sep 14, 2026

Copy link
Copy Markdown
Contributor
  • Add Fuzzing package trait wiring fuzzer/ASan flags and two fuzz targets (FuzzQUICPackets, FuzzTransportParameters), plus CI and nightly workflow integration with corpus caching
  • Add no-op SecFramerNull protector (FuzzBuild only) so fuzz inputs are treated as already-plaintext on the receive path
  • Stop processing coalesced frames/packets once the connection is terminal, add QUICFrame.discard, guard missing TLS options on INITIAL retransmission, and clear crypto reassembly queues on stop

@rpaulo
rpaulo requested a review from rnro September 14, 2026 20:47
@rpaulo rpaulo added the semver/none No version bump required. label Sep 14, 2026
@rpaulo rpaulo changed the title Fuzzing: add libFuzzer targets for QUIC packet and transport paramete… Fuzzing: add libFuzzer targets for QUIC packet and transport parameter parsing Sep 14, 2026
@rpaulo
rpaulo force-pushed the fuzzer branch 4 times, most recently from 0675b5b to 7ff102f Compare September 14, 2026 21:33

@agnosticdev agnosticdev left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@rpaulo
rpaulo force-pushed the fuzzer branch 14 times, most recently from e7ecb19 to 38d93ae Compare September 15, 2026 00:40
…r parsing

- Add `Fuzzing` package trait wiring fuzzer/ASan flags and two fuzz
  targets (`FuzzQUICPackets`, `FuzzTransportParameters`), plus CI and
  nightly workflow integration with corpus caching
- Add no-op `SecFramerNull` protector (FuzzBuild only) so fuzz inputs are
  treated as already-plaintext on the receive path
- Stop processing coalesced frames/packets once the connection is
  terminal, add `QUICFrame.discard`, guard missing TLS options on INITIAL
  retransmission, and clear crypto reassembly queues on stop
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

semver/none No version bump required.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants