Skip to content

Add fuzzing to CI#12887

Open
Dreamsorcerer wants to merge 24 commits into
masterfrom
fuzz
Open

Add fuzzing to CI#12887
Dreamsorcerer wants to merge 24 commits into
masterfrom
fuzz

Conversation

@Dreamsorcerer

Copy link
Copy Markdown
Member

No description provided.

@Dreamsorcerer Dreamsorcerer requested a review from webknjaz as a code owner June 9, 2026 18:36
@Dreamsorcerer Dreamsorcerer added the backport-3.15 Trigger automatic backporting to the 3.15 release branch by Patchback robot label Jun 9, 2026
@codecov

codecov Bot commented Jun 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.95%. Comparing base (c67c9e4) to head (3fe6800).
⚠️ Report is 21 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##           master   #12887   +/-   ##
=======================================
  Coverage   98.95%   98.95%           
=======================================
  Files         131      131           
  Lines       47800    47886   +86     
  Branches     2480     2492   +12     
=======================================
+ Hits        47300    47386   +86     
  Misses        376      376           
  Partials      124      124           
Flag Coverage Δ
Autobahn 22.29% <ø> (+<0.01%) ⬆️
CI-GHA 98.90% <ø> (-0.03%) ⬇️
OS-Linux 98.66% <ø> (-0.03%) ⬇️
OS-Windows 97.03% <ø> (-0.02%) ⬇️
OS-macOS 97.93% <ø> (-0.02%) ⬇️
Py-3.10 98.13% <ø> (-0.05%) ⬇️
Py-3.11 98.40% <ø> (-0.03%) ⬇️
Py-3.12 98.49% <ø> (-0.03%) ⬇️
Py-3.13 98.47% <ø> (-0.03%) ⬇️
Py-3.14 98.48% <ø> (-0.03%) ⬇️
Py-3.14t 97.56% <ø> (-0.04%) ⬇️
Py-pypy-3.11 97.43% <ø> (-0.03%) ⬇️
VM-macos 97.93% <ø> (-0.02%) ⬇️
VM-ubuntu 98.66% <ø> (-0.03%) ⬇️
VM-windows 97.03% <ø> (-0.02%) ⬇️
cython-coverage 38.04% <ø> (-0.03%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@codspeed-hq

codspeed-hq Bot commented Jun 9, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 83 untouched benchmarks
⏩ 83 skipped benchmarks1


Comparing fuzz (3fe6800) with master (9b18911)

Open in CodSpeed

Footnotes

  1. 83 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports.

Comment thread .github/workflows/cifuzz.yml Outdated
@Dreamsorcerer Dreamsorcerer requested a review from asvetlov as a code owner June 15, 2026 22:47
Comment thread fuzzers/http_parser.py Fixed
Comment thread fuzzers/http_parser.py Fixed
Comment thread fuzzers/http_payload_parser.py Fixed
Comment thread fuzzers/http_payload_parser.py Fixed
Comment thread fuzzers/payload_url.py Fixed
Comment thread fuzzers/payload_url.py Fixed
Comment thread fuzzers/payload_url.py Fixed
Comment thread fuzzers/payload_url.py Fixed
Comment thread fuzzers/web_request.py Fixed
Comment thread fuzzers/web_request.py Fixed
Comment thread fuzzers/web_request.py Fixed
Comment thread fuzzers/web_request.py Fixed
Comment thread fuzzers/web_request.py Fixed
Comment thread fuzzers/web_request.py Fixed
Comment thread fuzzers/http_parser.py
from aiohttp.http_exceptions import BadHttpMessage
from aiohttp.http_parser import HttpRequestParserC, HttpRequestParserPy

AIOHTTP_VAL = 0

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm unclear how this variable is supposed to change.

Comment thread fuzzers/multipart.py
FuzzStream(fdp.ConsumeBytes(atheris.ALL_REMAINING)),
)
if not obj.at_eof():
await obj.form()

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we get the coverage from the fuzzing run? I'm not sure this is covering enough of the multipart code.

Dreamsorcerer and others added 3 commits June 16, 2026 00:34
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
Comment thread fuzzers/http_parser.py Outdated
Comment thread fuzzers/http_payload_parser.py
Comment thread fuzzers/http_payload_parser.py Outdated
Comment thread fuzzers/http_payload_parser.py
Comment thread fuzzers/http_payload_parser.py Outdated
Comment thread fuzzers/multipart.py
Dreamsorcerer and others added 3 commits June 16, 2026 00:40
Comment thread fuzzers/http_parser.py Outdated
Comment thread fuzzers/http_payload_parser.py Outdated
Comment thread fuzzers/multipart.py Outdated
Comment thread fuzzers/payload_url.py Outdated
Comment thread fuzzers/web_request.py Outdated
Dreamsorcerer and others added 2 commits June 16, 2026 00:49
Co-authored-by: Sam Bull <aa6bs0@sambull.org>
Comment thread fuzzers/http_payload_parser.py Outdated
@Dreamsorcerer

Copy link
Copy Markdown
Member Author

@DavidKorczynski Could you check over this PR and confirm how to complete the integration with oss-fuzz repo?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-3.15 Trigger automatic backporting to the 3.15 release branch by Patchback robot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants