New issue
Advanced search Search tips

Issue 900484 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug



Sign in to add a comment

More quic fuzzing

Project Member Reported by och...@chromium.org, Oct 31

Issue description

We've seen critical vulnerabilities in QUIC in the past. We should do more fuzzing of it, as our current coverage is a bit low: 

https://chromium-coverage.appspot.com/reports/600954_fuzzers_only/linux/chromium/src/net/third_party/quic/core/report.html
 
(bulk comment)

To see the most recent code coverage report produced by the fuzz targets, use "latest" instead of the revision number in the URL to https://chromium-coverage.appspot.com/.

For example, https://chromium-coverage.appspot.com/reports/601457_fuzzers_only/linux/index.html needs to be changed to https://chromium-coverage.appspot.com/reports/latest_fuzzers_only/linux/index.html.
Project Member

Comment 2 by bugdroid1@chromium.org, Nov 16

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/7ebfd23cef2bc090e37e7babb29db46417605d7e

commit 7ebfd23cef2bc090e37e7babb29db46417605d7e
Author: btolsch <btolsch@chromium.org>
Date: Fri Nov 16 00:05:10 2018

Add simple QUIC transport parameters fuzzer

According to the current fuzzer coverage report, there is currently no
coverage of transport_parameters.cc.  There is also an existing TODO for
fuzzing this function.

Bug: 900484
Change-Id: If62481651506a3143148f5302b709509e1bea7ea
Reviewed-on: https://chromium-review.googlesource.com/c/1337523
Reviewed-by: Martin Barbella <mbarbella@chromium.org>
Reviewed-by: Ryan Hamilton <rch@chromium.org>
Commit-Queue: Brandon Tolsch <btolsch@chromium.org>
Cr-Commit-Position: refs/heads/master@{#608588}
[modify] https://crrev.com/7ebfd23cef2bc090e37e7babb29db46417605d7e/net/BUILD.gn
[add] https://crrev.com/7ebfd23cef2bc090e37e7babb29db46417605d7e/net/quic/quic_transport_parameters_fuzzer.cc
[modify] https://crrev.com/7ebfd23cef2bc090e37e7babb29db46417605d7e/net/third_party/quic/core/crypto/transport_parameters.h

Sign in to add a comment