Skip to content

Conversation

@Eomm
Copy link
Member

@Eomm Eomm commented Nov 16, 2025

Closes #57

This PR is an experiment and it shows how we could run some fuzzing test against some core module.

Fuzzing tests a program by feeding it large amounts of unexpected, random, or malformed input to expose crashes, vulnerabilities, and logic errors.

Example of the input we process here:

image

Example of the output:

image

Given these simple tests I can say:

  • there are not memory leak in this module, or the rss memory would grow (tested with an old version of momentjs)
  • the module handle the input in max 100ms (see the --timeout arg): so no open to DoS nor Unexpected Errors

If we want merge this PR, the npm scripts must be ON, otherwise the jazzer tool won't work.

cc @Fdawgs

Comment on lines +14 to +15
"jazzer:errors": "jazzer benchmarks/fuzzer-check-errors --sync --timeout=100 -- -max_total_time=120",
"jazzer:performance": "jazzer benchmarks/fuzzer-check-performance --sync --timeout=100 -- -max_total_time=120",
Copy link
Member

@Fdawgs Fdawgs Nov 17, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Eomm Maybe slap npm rebuild @jazzer.js/core onto the beginning of these so we don't need to allow scripts?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Test with fuzzing

3 participants