Files
kestrove-core/fuzz/fuzz_targets/manifest_decode.rs
T
samiandClaude Opus 5.5 83ab00c03c Add cargo-fuzz targets for the untrusted-input parsers and the hardening report
envelope_json, manifest_decode, item_replay, secret_key_parse, totp_parse, url_match,
with seeds. fuzz/README.md records the runs (and the server/desktop targets), the two
bugs fixed in the previous commits, dependency-policy results, CI changes and the
deploy check.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-17 01:01:44 +09:00

11 lines
352 B
Rust

//! kv-sync ManifestBody::decode (strict canonical CBOR): accepted input must be exactly its own encoding.
#![no_main]
use kv_sync::manifest::ManifestBody;
use libfuzzer_sys::fuzz_target;
fuzz_target!(|data: &[u8]| {
if let Ok(body) = ManifestBody::decode(data) {
assert_eq!(body.encode(), data, "non-canonical input accepted");
}
});