Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fuzz Testing #133

Open
ArielSAdamsNASA opened this issue Aug 27, 2020 · 0 comments
Open

Fuzz Testing #133

ArielSAdamsNASA opened this issue Aug 27, 2020 · 0 comments
Labels
security

Comments

@ArielSAdamsNASA
Copy link
Contributor

Is your feature request related to a problem? Please describe.
Fuzz testing inputs invalid or random data to discover coding errors and security loopholes. Helps identifies improper input validation (CWE-20), buffer copy without checking size of input (CWE-120), and information exposure (CWE-200)

Describe the solution you'd like
Once research is complete, implement testing. According to @astrogeco, research is in progress currently.

Additional context
Resources:
https://cwe.mitre.org/data/definitions/20.html
https://cwe.mitre.org/data/definitions/120.html
https://cwe.mitre.org/data/definitions/200.html

Requester Info
Ariel Adams, ASRC Federal
astrogeco added a commit that referenced this issue Mar 18, 2021
@astrogeco
Add sample_app PRs for IC:2021-03-23
eeb22aa 
nasa/sample_app#134 - Fix #133, convert from <> to " for local includes
nasa/sample_app#136 - Fix #135, Added a contributing guide that links to the main cFS contributing guide.
nasa/sample_app#132 - Fix #131, add context to the values for MsgIDs
chillfig pushed a commit to chillfig/cFS that referenced this issue Mar 17, 2022
@astrogeco
Merge pull request nasa#133 from jphickey/fix-41-no-pack-cmd-tlm
aa7f901 
Fix nasa#41, no packing of CMD/TLM structs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ArielSAdamsNASA