Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling #1997

Conversation

DaveLak
Copy link
Contributor

@DaveLak DaveLak commented Jan 10, 2025

Hey there 👋

As you may or may not have seen, the fuzz_submodule.py harness has been failing for some time now and I believe it is responisble for the "fuzzing build: failing" status on OSS-Fuzz.

I looked into it and it appears to be an issue with the test implementation, not GitPython.

The changes here should fix the issue causing the failure!

Please see the commit message for additional details.

Ensured submodule names, paths, and commit messages are sanitized to
avoid invalid states that are expected to cause exceptions and should
not halt the fuzzer.

In particular, the changes here:
- Sanitized inputs for submodule names, paths, and commit messages.
- Added validation for submodule SHA and path integrity.
Copy link
Member

@Byron Byron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your continued support with this, it's much appreciated!

@Byron Byron merged commit 583c011 into gitpython-developers:main Jan 11, 2025
24 checks passed
@DaveLak DaveLak deleted the fuzzing/fuzz-targets/git-broken-fuzz-submodule-test branch January 11, 2025 12:55
@DaveLak
Copy link
Contributor Author

DaveLak commented Jan 12, 2025

This worked. Issue now resolved on the OSS-Fuzz tracker: https://issues.oss-fuzz.com/379326001

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants