Google e hlahisitse projeke ea ClusterFuzzLite, e lumellang ho hlophisa tlhahlobo e akaretsang ea likhoutu bakeng sa ho lemoha kapele bofokoli bo ka bang teng nakong ea ts'ebetso ea litsamaiso tse tsoelang pele tsa kopanyo. Hajoale, ClusterFuzz e ka sebelisoa ho iketsetsa tlhahlobo ea fuzz ea likopo tsa ho hula ho GitHub Actions, Google Cloud Build, le Prow, empa tšehetso ea litsamaiso tse ling tsa CI e lebelletsoe nakong e tlang. Morero o ipapisitse le sethala sa ClusterFuzz, se etselitsoeng ho hokahanya mosebetsi oa lihlopha tsa liteko tse makatsang, 'me se ajoa tlasa laesense ea Apache 2.0.
Ho hlokometsoe hore ka mor'a hore Google e hlahise ts'ebeletso ea OSS-Fuzz ka 2016, merero e fetang 500 ea mohloli o bulehileng e ile ea amoheloa lenaneong le tsoelang pele la tlhahlobo ea fuzzing. Ho ipapisitsoe le liteko tse entsoeng, bofokoli bo netefalitsoeng bo fetang 6500 bo ile ba felisoa mme liphoso tse fetang likete tse 21 li ile tsa lokisoa. ClusterFuzzLite e ntse e tsoela pele ho nts'etsapele mekhoa ea tlhahlobo e makatsang e nang le bokhoni ba ho tseba mathata pejana nakong ea tlhahlobo ea liphetoho tse reriloeng. ClusterFuzzLite e se e kentsoe tšebetsong lits'ebetsong tsa tlhahlobo ea phetoho mererong ea systemd le curl, mme e nolofalelitse ho tseba liphoso tse fetotsoeng ke bahlahlobisisi ba static le li-linters tse sebelisitsoeng mothating oa pele oa ho lekola khoutu e ncha.
ClusterFuzzLite e tšehetsa tlhahlobo ea morero ka C, C++, Java (le lipuo tse ling tse thehiloeng ho JVM), Go, Python, Rust, le Swift. Teko ea Fuzzing e etsoa ho sebelisoa enjene ea LibFuzzer. Lisebelisoa tsa AddressSanitizer, MemorySanitizer, le UBSan (UndefinedBehaviorSanitizer) le tsona li ka bitsoa ho tseba liphoso tsa mohopolo le liphoso.
Likarolo tsa bohlokoa tsa ClusterFuzzLite: hlahloba ka potlako liphetoho tse reriloeng ho fumana liphoso pele ho kamohelo ea khoutu; ho khoasolla litlaleho tsa maemo a ho oa; bokhoni ba ho fetela pele ho liteko tsa fuzzing tse tsoetseng pele ho tseba liphoso tse tebileng tse sa kang tsa hlaha kamora ho hlahloba liphetoho tsa khoutu; tlhahiso ea litlaleho tsa khaso ho hlahloba khaso ea khoutu nakong ea tlhahlobo; meralo ea modular e u lumellang hore u khethe ts'ebetso e hlokahalang.
Ha re hopoleng hore tlhahlobo e makatsang e kenyelletsa ho hlahisa mefuta eohle ea mefuta-futa e sa reroang ea lintlha tse kentsoeng tse haufi le data ea 'nete (mohlala, maqephe a html a nang le paramethara ea li-tag, li-archives kapa litšoantšo tse nang le lihlooho tse sa tloaelehang, joalo-joalo), le ho rekota ho ka khonehang. ho hloleha ho sebetsa ha bona. Haeba tatelano e soahlamana kapa e sa lumellane le karabelo e lebelletsoeng, mokhoa ona o kanna oa bontša phoso kapa kotsi.
Source: opennet.ru