fuzz: hook up honggfuzz to a few targets

Cargo.toml

@@ -1,6 +1,7 @@
 [workspace]
 members = [
     "demo/billing",
+    "fuzz",
     "play/mbta",
     "src/avro",
     "src/avro-derive",

fuzz/.gitignore

@@ -0,0 +1,3 @@
+corpus
+hfuzz_target
+hfuzz_workspace

fuzz/Cargo.toml

@@ -0,0 +1,18 @@
+[package]
+name = "fuzz"
+version = "0.0.1"
+publish = false
+edition = "2018"
+
+[dependencies]
+honggfuzz = "0.5"
+repr = { path = "../src/repr" }
+sql-parser = { path = "../src/sql-parser" }
+
+[[bin]]
+name = "fuzz_parse_statements"
+path = "fuzz_targets/fuzz_parse_statements.rs"
+
+[[bin]]
+name = "fuzz_parse_time"
+path = "fuzz_targets/fuzz_parse_time.rs"

fuzz/README.md

@@ -0,0 +1,35 @@
+# fuzz
+
+## Installing `honggfuzz`
+
+```
+cargo install honggfuzz
+```
+
+Install [dependencies](https://github.com/rust-fuzz/honggfuzz-rs#dependencies) for your system.
+
+## Fuzzing
+
+Choose a target.
+These are `[[bin]]` entries in `Cargo.toml`.
+List them with `cargo read-manifest | jq '.targets[].name'` from the `fuzz` directory.
+
+Run the fuzzer:
+
+```shell
+cd fuzz
+cargo hfuzz run <target>
+```
+
+After a panic is found, get a stack trace with:
+
+```shell
+cargo hfuzz run-debug <target> hfuzz_workspace/<target>/*.fuzz
+```
+
+For example, with the `fuzz_parse_time` target:
+
+```shell
+cargo hfuzz run fuzz_parse_time
+cargo hfuzz run-debug fuzz_parse_time hfuzz_workspace/fuzz_parse_time/*.fuzz
+```

fuzz/fuzz_targets/fuzz_parse_statements.rs

@@ -0,0 +1,19 @@
+// Copyright Materialize, Inc. All rights reserved.
+//
+// Use of this software is governed by the Business Source License
+// included in the LICENSE file.
+//
+// As of the Change Date specified in that file, in accordance with
+// the Business Source License, use of this software will be governed
+// by the Apache License, Version 2.0.
+
+use honggfuzz::fuzz;
+use sql_parser::parser::parse_statements;
+
+fn main() {
+    loop {
+        fuzz!(|data: String| {
+            let _ = parse_statements(&data);
+        });
+    }
+}

fuzz/fuzz_targets/fuzz_parse_time.rs

@@ -0,0 +1,19 @@
+// Copyright Materialize, Inc. All rights reserved.
+//
+// Use of this software is governed by the Business Source License
+// included in the LICENSE file.
+//
+// As of the Change Date specified in that file, in accordance with
+// the Business Source License, use of this software will be governed
+// by the Apache License, Version 2.0.
+
+use honggfuzz::fuzz;
+use repr::strconv::parse_time;
+
+fn main() {
+    loop {
+        fuzz!(|data: String| {
+            let _ = parse_time(&data);
+        });
+    }
+}

fuzzbuzz.yaml

@@ -0,0 +1,11 @@
+# Copyright Materialize, Inc. All rights reserved.
+#
+# Use of this software is governed by the Business Source License
+# included in the LICENSE file at the root of this repository.
+#
+# As of the Change Date specified in that file, in accordance with
+# the Business Source License, use of this software will be governed
+# by the Apache License, Version 2.0.
+
+base:
+  language: rust