Skip to content

Investigate fuzzing framework targeting  #423

Open
@ionut-arm

Description

@ionut-arm

The first incarnation of the fuzz testing framework imitates a normal service client and pumps fuzzy messages into the service front-end, verifying what effect they have on the whole service. While this was easy to implement and provides a natural target that replicates a client, more specific/targeted fuzzing targets should be considered.

This issue is for investigating such target options. A few examples to consider:

  • Send operations straight into the providers, potentially with a target per operation.
  • Send requests straight into authenticators
  • Send requests to the interface code that parses them from binary
  • Send key mappings to the OnDiskKeyInfoManager to verify its ability to parse them
    etc.

Metadata

Metadata

Assignees

No one assigned

    Labels

    mediumEffort labelquestionFurther information is requestedsecurityIssues related to the security and privacy of the servicetestingTask related to testing

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions