{"id":102283,"date":"2021-11-14T15:36:53","date_gmt":"2021-11-14T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite"},"modified":"2021-11-14T15:36:53","modified_gmt":"2021-11-14T13:36:53","slug":"google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/google-predstavil-sistemu-fuzzing-testirovaniya-clusterfuzzlite","title":{"rendered":"Google prezantoi sistemin e testimit fuzzing ClusterFuzzLite.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Google prezantoi projektin ClusterFuzzLite, i cili lejon organizimin e testimit fuzzing t\u00eb kodit p\u00ebr zbuluar her\u00ebt vulnerabilitetet e mundshme gjat\u00eb pun\u00ebs s\u00eb sistemeve t\u00eb integrimit t\u00eb vazhduesh\u00ebm. Aktualisht, ClusterFuzz mund t\u00eb p\u00ebrdoret p\u00ebr automatizimin e testimit fuzzing t\u00eb k\u00ebrkesave pull n\u00eb GitHub Actions, n\u00eb Google Cloud Build dhe n\u00eb Prow, por pritet q\u00eb n\u00eb t\u00eb ardhmen t\u00eb mb\u00ebshtetet edhe nga sistemet e tjera CI. Projekti bazohet n\u00eb platform\u00ebn ClusterFuzz, e krijuar p\u00ebr t\u00eb koordinuar pun\u00ebn e klastereve t\u00eb testimit fuzzing, dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
V\u00ebrehet se pas implementimit n\u00eb vitin 2016 nga kompania Google t\u00eb sh\u00ebrbimit OSS-Fuzz, n\u00eb programin e testimit t\u00eb vazhduesh\u00ebm fuzzing jan\u00eb pranuar m\u00eb shum\u00eb se 500 projekte t\u00eb r\u00ebnd\u00ebsishme t\u00eb hapura. N\u00eb baz\u00eb t\u00eb kontrolleve t\u00eb kryera, jan\u00eb eliminuar m\u00eb shum\u00eb se 6500 vulnerabilitete t\u00eb konfirmuara dhe jan\u00eb rregulluar m\u00eb shum\u00eb se 21 mij\u00eb gabime. ClusterFuzzLite vazhdon t\u00eb zhvilloj\u00eb mekanizmat e testimit fuzzing me mund\u00ebsin\u00eb e zbuluar t\u00eb problemeve m\u00eb her\u00ebt n\u00eb faz\u00ebn e rishikimit t\u00eb ndryshimeve t\u00eb propozuara. ClusterFuzzLite \u00ebsht\u00eb implementuar tashm\u00eb n\u00eb proceset e rishikimit t\u00eb ndryshimeve n\u00eb projektet systemd dhe curl, dhe ka lejuar identifikimin e gabimeve q\u00eb ishin anashkaluar nga analizator\u00ebt statik\u00eb dhe linter-et q\u00eb ishin p\u00ebrdorur n\u00eb faz\u00ebn fillestare t\u00eb kontrollit t\u00eb kodit t\u00eb ri. <\/p>\n
ClusterFuzzLite mb\u00ebshtet kontrollin e projekteve n\u00eb gjuh\u00ebt C, C++, Java (dhe gjuh\u00ebt e tjera t\u00eb bazuara n\u00eb JVM), Go, Python, Rust dhe Swift. Testimi fuzzing kryhet duke p\u00ebrdorur motorin LibFuzzer. P\u00ebr identifikimin e gabimeve n\u00eb pun\u00ebn me memorie dhe anomalive, gjithashtu mund t\u00eb thirren instrumente si AddressSanitizer, MemorySanitizer dhe UBSan (UndefinedBehaviorSanitizer). <\/p>\n
K\u00ebto jan\u00eb mund\u00ebsit\u00eb kryesore t\u00eb ClusterFuzzLite: kontroll i shpejt\u00eb i ndryshimeve t\u00eb propozuara p\u00ebr t\u00eb gjetur gabime n\u00eb faz\u00ebn para miratimit t\u00eb kodit; ngarkimi i raporteve mbi kushte t\u00eb shkaktimit t\u00eb r\u00ebnieve; mund\u00ebsia p\u00ebr kalimin n\u00eb teste m\u00eb t\u00eb thella fuzzing p\u00ebr identifikimin e gabimeve m\u00eb t\u00eb thella, q\u00eb nuk u shfaq\u00ebn pas verifikimit t\u00eb ndryshimit t\u00eb kodit; gjenerimi i raporteve t\u00eb coverage p\u00ebr vler\u00ebsimin e mbulimit t\u00eb kodit gjat\u00eb testimit; arkitektur\u00eb modulare, q\u00eb lejon p\u00ebrzgjedhjen e funksionalitetit t\u00eb nevojsh\u00ebm. <\/p>\n
Kujtojm\u00eb se gjat\u00eb testimit fuzzing, krijohet nj\u00eb rrjedh\u00eb t\u00eb t\u00eb gjitha kombinimeve t\u00eb mundshme rast\u00ebsore t\u00eb t\u00eb dh\u00ebnave hyr\u00ebse, t\u00eb af\u00ebrta me t\u00eb dh\u00ebnat reale (p\u00ebr shembull, faqe html me parametra rast\u00ebsor\u00eb t\u00eb etiketave, arkiva ose imazhe me tituj anormal\u00eb etj.), dhe hidrovezionimi i mund\u00ebsive p\u00ebr \u00e7rregullime gjat\u00eb procesimit t\u00eb tyre. N\u00ebse ndonj\u00eb sekuenc\u00eb shkakton nj\u00eb d\u00ebshtim ose nuk korrespondon me reagimin e pritur, ky veprim ka nj\u00eb probabilitet t\u00eb lart\u00eb p\u00ebr t\u00eb treguar nj\u00eb gabim ose nj\u00eb varf\u00ebri. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"