IJHack / QtPass / 38090884392
93%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 117
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 92.891%. Remained the same
38090884392

push

github

web-flow 
Fuzz the parsers a shared store feeds (libFuzzer, ASan + UBSan) (#1978)

* Fuzz the parsers a shared store feeds (libFuzzer, ASan + UBSan)

Four libFuzzer targets in tests/fuzz/ for the inputs the OSS Scanner
threat model calls untrusted:

- fuzz_filecontent: entry text through FileContent::parse, both modes,
  with and without template fields.
- fuzz_totp: Base32 encode/decode round trip; Totp::parse agrees with
  isValid, a parsed config generates a code of the promised length, and
  toUri() parses back to the same key, digits, step, algorithm, encoder.
- fuzz_gpgid: Pass::parseRecipients and GpgIdGeneration::parse; an
  accepted header written out again parses to the same values.
- fuzz_gpgcolon: parseGpgColonOutput for public and secret listings.

build.sh builds an instrumented copy of the src/ library with qmake and
links each target against QtCore only. A Fuzz workflow (Qt 6.8, clang 18)
runs them for two minutes each on changes to src/ and ten minutes each
weekly, keeping the corpus in the Actions cache and uploading crashing
inputs. Locally each ran 60 s clean (about 4.7M executions in all).

Also gives OpenSSF Scorecard's Fuzzing check something to find.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JuQsrHonihp1nARE7bzstc

* Fuzz: tabs in build.sh; keep the seed inputs out of the linters

shfmt and EditorConfig want tabs in shell scripts. The seed inputs under tests/fuzz/corpus/ are raw fuzzer input (a mode byte, no final newline) and are excluded from super-linter and editorconfig-checker like the translation files.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JuQsrHonihp1nARE7bzstc

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

9081 of 9776 relevant lines covered (92.89%)

191.57 hits per line

Jobs
ID Job ID Ran Files Coverage
1 38090884392.1 117
92.89
GitHub Action Run
Source Files on build 38090884392