talksik/uWebSockets
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Alex Hultman
2019-03-13 17:41:54 +01:00
committed by GitHub
parent ea0d6a0b3d
commit c42e54780c
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fuzzing/README.md
+12 -2
View File
@@ -1,5 +1,15 @@
# Fuzz-testing of parsers
# libFuzzer/AddressSanitizer fuzz-testing of various parsers
Here we do coverage-based fuzzing of code responsible for parsing arbitrary network data.
A secure web server must be capable of receiving mass amount of malicious input without showing signs of weakness. Test code is being bombarded with evolving random data, with fitness determined by coverage - the goal of seeking out as much of the program state space as possible. This is done while AddressSanitizer monitors the program for memory correctness.
A secure web server must be capable of receiving mass amount of malicious input without misbehaving or performing illegal actions. Test code is being bombarded with evolving random data, with fitness determined by coverage - that is we aim to seek out as much of the "branching space" of the program as possible. This is done while AddressSanitizer monitors the program for memory correctness.
Currently the following parts are individually tested:
* WebSocket handshake generator
* WebSocket message parser
* WebSocket extensions parser & negotiator
* Http parser
* Http method/url router
No defects or issues are left unfixed.