Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test: s2n_deserialize_resumption_state_test needs corpus files #4629

Open
maddeleine opened this issue Jun 25, 2024 · 1 comment
Open

test: s2n_deserialize_resumption_state_test needs corpus files #4629

maddeleine opened this issue Jun 25, 2024 · 1 comment

Comments

@maddeleine
Copy link
Contributor

Security issue notifications

If you discover a potential security issue in s2n we ask that you notify
AWS Security via our vulnerability reporting page. Please do not create a public github issue.

Problem:

The fuzz test s2n_deserialize_resumption_state_test needs corpus files in order to get good results. For some reason when we added that test we didn't add any corresponding corpus files.

Solution:

Run s2n_deserialize_resumption_state_test for a while and commit the corpus that it generates. This is made more difficult by the fact that the fuzz tests use a lot of memory. I found that on my computer with 50GB the fuzz tests were running out of memory. I recommend using an instance with at least 150GB, as that's what we use to run the scheduled fuzz tests.

Requirements / Acceptance Criteria:

corpus for s2n_deserialize_resumption_state_test exists.

Out of scope:

@maddeleine
Copy link
Contributor Author

Here's the command I used to run a single test. The only dependency I needed was libfuzzer. Couldn't get it to run successfully on my machine due to memory constraints.
LIBFUZZER_ROOT=/home/ubuntu/s2n/test-deps/libfuzzer S2N_UNSAFE_FUZZING_MODE=1 FUZZ_TESTS="s2n_deserialize_resumption_state_test" make fuzz

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant