cpython/Modules/_xxtestfuzz/fuzz_tests.txt

fuzz_builtin_float
fuzz_builtin_int
fuzz_builtin_unicode
fuzz_json_loads
fuzz_sre_compile
fuzz_sre_match
fuzz_csv_reader
fuzz_struct_unpack
fuzz_ast_literal_eval
bpo-29505: Add fuzz tests for float(str), int(str), unicode(str) (#2878) Add basic fuzz tests for a few common builtin functions. This is an easy place to start, and these functions are probably safe. We'll want to add more fuzz tests later. Lets bootstrap using these. While the fuzz tests are included in CPython and compiled / tested on a very basic level inside CPython itself, the actual fuzzing happens as part of oss-fuzz (https://github.com/google/oss-fuzz). The reason to include the tests in CPython is to make sure that they're maintained as part of the CPython project, especially when (as some eventually will) they use internal implementation details in the test. (This will be necessary sometimes because e.g. the fuzz test should never enter Python's interpreter loop, whereas some APIs only expose themselves publicly as Python functions.) This particular set of changes is part of testing Python's builtins, tracked internally at Google by b/37562550. The _xxtestfuzz module that this change adds need not be shipped with binary distributions of Python. 2017-09-06 11:15:35 -07:00			`fuzz_builtin_float`
			`fuzz_builtin_int`
			`fuzz_builtin_unicode`
bpo-29505: Fuzz json module, enforce size limit on int(x) fuzz (GH-13991) * bpo-29505: Enable fuzz testing of the json module, enforce size limit on int(x) fuzz and json input size to avoid timeouts. Contributed by by Ammar Askar for Google. 2019-06-11 21:30:35 -07:00			`fuzz_json_loads`
bpo-29505: Add more fuzzing for re.compile, re.load and csv.reader (GH-14255) Add more fuzz testing for re.compile, re.load and csv.reader 2019-06-30 01:54:43 -04:00			`fuzz_sre_compile`
			`fuzz_sre_match`
			`fuzz_csv_reader`
Fuzz struct.unpack and catch RecursionError in re.compile (GH-18679) 2020-02-28 02:05:02 -05:00			`fuzz_struct_unpack`
bpo-29505: Add fuzzer for ast.literal_eval (GH-28777) This supercedes https://github.com/python/cpython/pull/3437 and fuzzes the method we recommend for unsafe inputs, `ast.literal_eval`. This should exercise the tokenizer and parser. 2021-10-06 19:22:09 -04:00			`fuzz_ast_literal_eval`