eosrio / rs-abieos / 26132129233

30%

Build Type

push

github

Committed by igorls

Commit Message

feat(rust-backend): Milestone 8 — fuzz & property testing + robustness fixes

Adds the Milestone 8 fuzz/property layer and folds in the in-progress
optimization-campaign working tree (module split, FNV/IStr/SWAR, single-pass
ABI-JSON parser, BENCHMARKS) so the port history stays continuous.

Milestone 8:
- tests/rust_backend_fuzz_property.rs: dependency-free seeded (SplitMix64)
  property/fuzz suite — no-panic fuzz for json<->bin / abi-json<->bin /
  malformed hex/key-sig/asset-time, round-trip stability, recursion limits
  (type-spec depth 32, JSON depth 128), duplicate/reordered fields. Failures
  reproduce from a printed (seed, iteration) pair.
- fuzz/: cargo-fuzz / libFuzzer harness (separate package, own [workspace],
  nightly-only) with 4 targets; fuzz/Cargo.lock committed for reproducibility.
- CI policy: ci.yml `fuzz-smoke` job (20k iters, fixed + run-varying seed);
  .github/workflows/fuzz.yml weekly/manual deep fuzz with crash-artifact
  upload. Documented in FUZZING.md.

Two robustness bugs found by the suite and fixed:
- Interior-NUL panic: every CString::new(...).unwrap() in src/lib.rs panicked
  the process on caller input containing a NUL byte. All 17 sites now return
  the function's existing AbieosError variant (no public enum change).
- Unbounded-allocation abort (security): read_vec in abi_def.rs pre-allocated
  Vec::with_capacity(len) for an untrusted varuint32; a crafted ABI length
  requested ~182 GiB and aborted via SIGABRT. Now bounded by remaining input
  (len.min(r.remaining())); pinned by regression_abi_bin_unbounded_alloc.

Validated: full rust-backend + default cpp-backend suites pass; 100k-iter
property/fuzz pass clean in ~1.6s. Tracker M8 complete; CHANGELOG updated.

Coverage Stats

34 of 226 new or added lines in 8 files covered. (15.04%)

1 existing line in 1 file now uncovered.

259 of 964 relevant lines covered (26.87%)

279.82 hits per line