Lines Matching +full:fuzz +full:- +full:bugs
1 # libprotobuf-mutator
3 …Build Status](https://travis-ci.org/google/libprotobuf-mutator.svg?branch=master)](https://travis-…
4 …oss-fuzz-build-logs.storage.googleapis.com/badges/libprotobuf-mutator.svg)](https://oss-fuzz-build…
7 libprotobuf-mutator is a library to randomly mutate
16 sudo apt-get update
17 sudo apt-get install protobuf-compiler libprotobuf-dev binutils cmake \
18 ninja-build liblzma-dev libz-dev pkg-config autoconf libtool
26 cmake .. -GNinja -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++ -DCMAKE_BUILD_TYPE=Debug
31 By default, the system-installed version of
44 This installs the headers, pkg-config, and static library.
45 By default the headers are put in `/usr/local/include/libprotobuf-mutator`.
49 To use libprotobuf-mutator simply include
55 The field mutation logic is very basic --
91 ### Mutation post-processing (experimental)
139 ## UTF-8 strings
140 "proto2" and "proto3" handle invalid UTF-8 strings differently. In both cases
141 string should be UTF-8, however only "proto3" enforces that. So if fuzzer is
142 applied to "proto2" type libprotobuf-mutator will generate any strings including
143 invalid UTF-8. If it's a "proto3" message type, only valid UTF-8 will be used.
147 [extensions](https://developers.google.com/protocol-buffers/docs/proto#extensions).
150 You can use [post processing hooks](#mutation-post-processing-experimental) to
156 * [LLVM](https://github.com/llvm-mirror/clang/search?q=DEFINE_TEXT_PROTO_FUZZER+OR+DEFINE_PROTO_FUZ…
158 ## Bugs found with help of the library
161 …erofcommunity.net/poc2018/ned.pdf) ([Actual still restricted bug](https://bugs.chromium.org/p/chro…
162 * [Stack Buffer Overflow in QuicClientPromisedInfo](https://bugs.chromium.org/p/chromium/issues/det…
163 * [null dereference in sqlite3ExprCompare](https://bugs.chromium.org/p/chromium/issues/detail?id=91…
166 * [Heap-use-after-free in Envoy::Upstream::SubsetLoadBalancer::updateFallbackSubset](https://bugs.c…
167 * [Heap-use-after-free in Envoy::Secret::SecretManagerImpl](https://bugs.chromium.org/p/oss-fuzz/is…
168 * [Heap-buffer-overflow in Envoy::Http::HeaderString](https://bugs.chromium.org/p/oss-fuzz/issues/d…
171 * [Attacking Chrome IPC: Reliably finding bugs to escape the Chrome sandbox](https://media.ccc.de/v…
172 * [Structure-aware fuzzing for Clang and LLVM with libprotobuf-mutator](https://www.youtube.com/wat…
173 * [Structure-Aware Fuzzing with libFuzzer](https://github.com/google/fuzzer-test-suite/blob/master/…