Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add fuzz tests in cqlvalue with random data #272

Open
martin-sucha opened this issue Aug 10, 2022 · 0 comments
Open

Add fuzz tests in cqlvalue with random data #272

martin-sucha opened this issue Aug 10, 2022 · 0 comments

Comments

@martin-sucha
Copy link
Contributor

Currently fuzz tests for CQL values like FuzzCqlValueInt32 test that data == deserialize(serialize(data)). However, these kinds of tests are unlikely to find issues like panics because of missing bounds checks when parsing data, since they only try to parse valid data.

For example, CqlValue.AsStringMap seems that it will panic if the CQLValue.Value field does not have enough bytes (although I haven't tried running the function yet).

Consider adding fuzz tests that do deserialize(random bytes) and test that the parsing functions never panic for cql values as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant