Add Go fuzz tests for OSS-Fuzz integration#251
Conversation
Covers DNS message parsing and HTTP/2 HPACK decoding — both pre-auth boundaries in Go networking infrastructure.
|
This PR (HEAD: 0fa7c60) has been imported to Gerrit for code review. Please visit Gerrit at https://go-review.googlesource.com/c/net/+/789961. Important tips:
|
|
Message from Gopher Robot: Patch Set 1: (1 comment) Please don’t reply on this GitHub thread. Visit golang.org/cl/789961. |
|
This PR (HEAD: 1436273) has been imported to Gerrit for code review. Please visit Gerrit at https://go-review.googlesource.com/c/net/+/789961. Important tips:
|
|
This PR (HEAD: ab37dbc) has been imported to Gerrit for code review. Please visit Gerrit at https://go-review.googlesource.com/c/net/+/789961. Important tips:
|
…izer, SARIF always
|
This PR (HEAD: 4adc06e) has been imported to Gerrit for code review. Please visit Gerrit at https://go-review.googlesource.com/c/net/+/789961. Important tips:
|
Adds Go native fuzz targets for OSS-Fuzz integration (google/oss-fuzz#15678).
Criticality: golang.org/x/net provides DNS, HTTP/2 HPACK, and WebSocket implementations. Every Go HTTP/2 server depends on these packages. A parsing bug = pre-auth DoS vector.
Fuzz targets:
FuzzDNSMessageParse— DNS message parser with arbitrary bytes (pre-auth boundary)FuzzHpackDecode— HTTP/2 HPACK header decoder (every HTTP/2 connection)FuzzHpackRoundTrip— HPACK encode→decode consistencyVerified:
go test -fuzz=. -fuzztime=30s