Google yakaunza ClusterFuzzLite purojekiti, iyo inobvumira kuronga kuyedza kwakapusa kwekodhi yekukurumidza kuona kusagona kuitika panguva yekushanda kweanoramba achibatanidza masisitimu. Parizvino, ClusterFuzz inogona kushandiswa kuita otomatiki kuyedzwa kwefuzz kwekudhonza zvikumbiro muGitHub Zviito, Google Cloud Build, uye Prow, asi rutsigiro rwemamwe masisitimu eCI anotarisirwa mune ramangwana. Iyo purojekiti yakavakirwa papuratifomu yeClusterFuzz, yakagadzirirwa kuronga basa remasumbu ekuyedza masumbu, uye yakagoverwa pasi perezinesi reApache 2.0.
Zvinocherechedzwa kuti mushure mekunge Google yaunza iyo OSS-Fuzz sevhisi muna 2016, anopfuura mazana mashanu akakosha akavhurika sosi mapurojekiti akagamuchirwa muchirongwa chinoramba chichiyedza. Zvichienderana nemiedzo yakaitwa, kupfuura 500 yakasimbiswa kusasimba kwakabviswa uye zvinopfuura zviuru makumi maviri nerimwe zvikanganiso zvakagadziriswa. ClusterFuzzLite inoenderera mberi nekugadzira nzira dzekuyedza dzakapusa nekugona kuona matambudziko pakutanga padanho rekuongorora rekuchinja kwakarongwa. ClusterFuzzLite yakatoitwa mumagadzirirwo ekuongorora shanduko mune systemd uye curl mapurojekiti, uye yaita kuti zvikwanise kuona zvikanganiso zvakapotswa ne static analyzers uye linters anoshandiswa padanho rekutanga rekutarisa kodhi nyowani.
ClusterFuzzLite inotsigira ongororo yeprojekiti muC, C++, Java (nemimwe mitauro yakavakirwa paJVM), Go, Python, Rust, uye Swift. Kuyedza kuyedza kunoitwa uchishandisa LibFuzzer injini. Iyo KeroSanitizer, MemorySanitizer, uye UBSan (UndefinedBehaviorSanitizer) maturusi anogona zvakare kushevedzwa kuti aone zvikanganiso zvendangariro uye anomalies.
Akakosha maficha eClusterFuzzLite: cheki chekukurumidza chekuchinja kwakarongwa kuti uwane zvikanganiso usati wagamuchira kodhi; kudhawunirodha mishumo pamusoro pemamiriro ekupunzika; iko kugona kuenderera mberi kune yakawedzera fuzzing bvunzo kuti uone zvakadzika zvikanganiso zvisina kubuda mushure mekutarisa shanduko yekodhi; chizvarwa chemishumo yekuvhara yekuongorora kuvharwa kwekodhi panguva yekuedzwa; modular architecture inokubvumira kuti usarudze basa rinodiwa.
Ngatiyeukei kuti kuyedza kusanganisa kunosanganisira kugadzira kuyerera kwemarudzi ese akasanganiswa ekuisa data ari padyo nedata chairo (semuenzaniso, mapeji ehtml ane mapeji eti tag, matura kana mifananidzo ine mazita asinganzwisisiki, nezvimwewo), uye kurekodha zvinogoneka. kukundikana mukugadzirisa kwavo. Kana nhevedzano ikaparara kana kuti isingaenderane nemhinduro inotarisirwa, zvino maitiro aya anogona kuratidza tsikidzi kana kusagadzikana.
Source: opennet.ru