{"id":155023,"date":"2026-01-25T05:11:54","date_gmt":"2026-01-25T03:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-infrastrukture-oss-fuzz-realizovana-podderzhka-proektov-na-yazyke-lua"},"modified":"2026-01-25T05:11:54","modified_gmt":"2026-01-25T03:11:54","slug":"v-infrastrukture-oss-fuzz-realizovana-podderzhka-proektov-na-yazyke-lua","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/v-infrastrukture-oss-fuzz-realizovana-podderzhka-proektov-na-yazyke-lua","title":{"rendered":"Nell'infrastruttura OSS Fuzz \u00e8 stato implementato il supporto per i progetti in linguaggio Lua","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nell'infrastruttura per il fuzzing test continuo di OSS-Fuzz \u00e8 stata aggiunta la possibilit\u00e0 di testare progetti scritti in Lua, oltre ai linguaggi precedentemente supportati come C\/C++, Go, Swift, Rust, Python, JavaScript e Java. L'integrazione \u00e8 realizzata attraverso il progetto luzer, che sviluppa strumenti specializzati per il fuzzing test del codice in Lua e per le estensioni di Lua scritte in C\/C++. <\/p>\n

Il progetto utilizza la libreria libFuzzer e pu\u00f2 essere utilizzato insieme agli strumenti AddressSanitizer, MemorySanitizer, LeakSanitizer, ThreadSanitizer e Undefined Behavior Sanitizer, che consentono, sulla base dei problemi identificati durante il fuzzing test, di determinare la presenza di vulnerabilit\u00e0 note causate da overflow di buffer, overflow di numeri interi, accessi a aree non inizializzate e liberate, perdite di memoria, dereferenziazioni di puntatori e problemi con l'acquisizione di lock. Il codice del progetto \u00e8 disponibile con licenza ISC. <\/p>\n

Durante il suo funzionamento, luzer esplora possibili combinazioni di dati di input e genera un rapporto su tutti i crash identificati e le eccezioni non gestite. Ad esempio, nel testare la libreria per il parsing del formato MsgPack antirez\/lua-cmsgpack utilizzando luzer, \u00e8 stato rilevato che i dati con un numero elevato di array possono portare a un overflow dello stack. <\/p>\n

Nell'ambito del progetto lunapark, lo strumento luzer \u00e8 utilizzato per testare PUC Rio Lua, il compilatore tracing LuaJIT, un database ad alte prestazioni e server<\/a> applicazioni Tarantool, oltre che per il test di moduli Lua di terze parti. <\/p>\n

Gli sviluppatori di progetti open source possono aggiungere i loro repository per il test, preparando un modello di fuzzing test e inviando una richiesta speciale tramite pull request. In caso di errori, gli sviluppatori ricevono automaticamente una notifica e viene creata una segnalazione privata per la correzione (per evitare la fuga prematura di informazioni sulle vulnerabilit\u00e0, il ticket \u00e8 creato nel sistema di tracciamento dei bug con accesso limitato). OSS Fuzz tiene traccia dello stato della correzione del bug e chiude il ticket automaticamente se non \u00e8 pi\u00f9 riproducibile. Le informazioni sul problema diventano pubblicamente accessibili dopo 7 giorni dalla correzione o dopo 90 giorni dalla scoperta del bug, se il problema rimane non corretto.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0444\u0430\u0437\u0437\u0438\u043d\u0433-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f OSS-Fuzz \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Lua, \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0440\u0430\u043d\u0435\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c \u044f\u0437\u044b\u043a\u0430\u043c C\/C++, Go, Swift, Rust, Python, JavaScript \u0438 Java. \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 luzer, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0444\u0430\u0437\u0437\u0438\u043d\u0433-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Lua \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Lua, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 C\/C++. \u041f\u0440\u043e\u0435\u043a\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libFuzzer \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-155023","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nell'infrastruttura OSS Fuzz \u00e8 stata implementata la supporto per progetti in linguaggio Lua | ProHoster","description":"Nell'infrastruttura per il testing continuo di fuzzing OSS-Fuzz \u00e8 stata aggiunta la possibilit\u00e0 di testare progetti scritti in linguaggio Lua, oltre ai linguaggi precedentemente supportati C\/C++, Go, Swift, Rust e Python.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/v-infrastrukture-oss-fuzz-realizovana-podderzhka-proektov-na-yazyke-lua","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 OSS Fuzz \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Lua | ProHoster","og:description":"\u0412 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0444\u0430\u0437\u0437\u0438\u043d\u0433-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f OSS-Fuzz \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Lua, \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0440\u0430\u043d\u0435\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c \u044f\u0437\u044b\u043a\u0430\u043c C\/C++, Go, Swift, Rust, Python.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/v-infrastrukture-oss-fuzz-realizovana-podderzhka-proektov-na-yazyke-lua","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-25T03:11:54+00:00","article:modified_time":"2026-01-25T03:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"155023","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:32:28","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-25 03:11:55","updated":"2026-02-22 15:32:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/155023","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=155023"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/155023\/revisions"}],"predecessor-version":[{"id":162530,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/155023\/revisions\/162530"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=155023"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=155023"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=155023"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}