open-telemetry / open-telemetry/opentelemetry-cpp
Request for Adding Fuzz Testing to OpenTelemetry-cpp Library
@esigo is already working on this.
Since Jul 22, 2023.
- Dominant language
- C++
- Stars
- 1.4k
- Forks
- 632
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 75
Description
Issue Description:
As a part of the OpenTelemetry-cpp community, we would like to request the addition of fuzz testing to the library. Fuzz testing is a valuable technique that complements traditional testing approaches and significantly enhances the overall testing and security of the library.
Why We Need Fuzz Testing:
-
Bug Detection: Fuzz testing is excellent at finding edge cases and unexpected behavior that may not be discovered using traditional test cases. It can uncover hard-to-detect bugs and corner cases in the codebase.
-
Security Vulnerability Detection: Fuzz testing can help identify potential security vulnerabilities such as buffer overflows, memory corruption, and other issues that could be exploited by malicious users.
-
Improved Test Coverage: By generating a wide variety of random inputs, fuzz testing can achieve higher code coverage, ensuring that more parts of the library are exercised during testing.
-
Early Bug Detection: Fuzz testing can be introduced early in the development process to continuously test and validate code changes. This helps identify regressions quickly and facilitates rapid bug fixes.
-
Community Assurance: Implementing fuzz testing in OpenTelemetry-cpp will provide the community with an additional layer of assurance about the reliability and security of the library, increasing its overall trustworthiness.
Proposed Approach:
We propose integrating fuzz testing using the Google FuzzTest framework. This allows us to use fuzzed inputs as test cases for various components within the library.
Community Involvement:
We welcome contributions and feedback from the community regarding the implementation of fuzz testing. Community members are encouraged to participate in testing, review, and refining the fuzz targets to maximize the effectiveness of fuzz testing for OpenTelemetry-cpp.
We believe that adding fuzz testing to OpenTelemetry-cpp will significantly improve the library's robustness, security, and overall quality, and we kindly request the consideration and support of the maintainers and the community in this endeavor.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.