Skip to content

fix(mokken): bound zero-cell structural traversal #1658

fix(mokken): bound zero-cell structural traversal

fix(mokken): bound zero-cell structural traversal #1658

Workflow file for this run

name: ClusterFuzzLite PR fuzzing
on:
pull_request:
types: [opened, synchronize, reopened, ready_for_review, converted_to_draft, closed]
paths:
- ".clusterfuzzlite/**"
- ".github/workflows/cflite_pr.yml"
- "Cargo.toml"
- "crates/**"
- "fuzz/**"
permissions:
contents: read
jobs:
PR:
if: ${{ !github.event.pull_request.draft && github.event.action != 'closed' }}
runs-on: ubuntu-24.04
permissions:
contents: read
security-events: write
concurrency:
group: ${{ github.workflow }}-${{ github.repository }}-${{ github.event.pull_request.number }}
cancel-in-progress: true
strategy:
fail-fast: false
matrix:
sanitizer: [address]
steps:
- name: Prepare ClusterFuzzLite output directory
run: |
mkdir -p "$GITHUB_WORKSPACE/build-out"
chmod -R a+rwx "$GITHUB_WORKSPACE/build-out"
echo "Prepared ClusterFuzzLite build-out for non-root fuzzbuilder writes"
ls -ld "$GITHUB_WORKSPACE" "$GITHUB_WORKSPACE/build-out"
- name: Build fuzzers (${{ matrix.sanitizer }})
id: build
uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1
with:
language: rust
github-token: ${{ secrets.GITHUB_TOKEN }}
sanitizer: ${{ matrix.sanitizer }}
- name: Run fuzzers (${{ matrix.sanitizer }})
id: run
uses: google/clusterfuzzlite/actions/run_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
fuzz-seconds: 120
mode: code-change
output-sarif: true
sanitizer: ${{ matrix.sanitizer }}