bazel-contrib / bazel-contrib/rules_fuzzing

Black box fuzzing with TSAN

Open
#224 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Starlark
Stars
93
Forks
26
PR merge metrics
No merged PRs in 30d

Description

## Requested Behavior
Support for black box fuzzing with TSAN.

An impediment to fuzzing with TSAN is that coverage instrumentation for coverage-guided fuzzing is not thread safe (see https://github.com/google/oss-fuzz/issues/5272#issuecomment-790805359). We can circumvent the problem of racy coverage instrumentation by abandoning coverage instrumentation altogether.

I was able to set up black box fuzzing with TSAN and honggfuzz. Unfortunately, since I use toolchain features rather than rules_fuzzing's configuration transitions to instrument my fuzz tests, I can't trivially upstream my code change directly here. But it might be worth implementing support for `tsan-*` configurations.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.