fuzz: weekly regression seeds (2026-05-10)#10
Open
lilith wants to merge 1 commit into
Open
Conversation
limits_boundaries-crash-36a0851d8893 (80 bytes): OOM via WebPAllocateDecBuffer attempting ~17GB allocation with crafted dimensions. Found by limits_boundaries fuzzer from corpus seed. https://claude.ai/code/session_01TtcdYQzUSAE9ZVT6sNXfAT
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #10 +/- ##
=======================================
Coverage 78.85% 78.85%
=======================================
Files 18 18
Lines 4460 4460
=======================================
Hits 3517 3517
Misses 943 943 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Weekly fuzz sweep 2026-05-10: all 12 targets ran for 600 s each. One new crash found and seeded.
fuzz/regression/cargo test --all-features --test fuzz_regressionpassesNew Seeds
limits_boundaries-crash-36a0851d8893WebPAllocateDecBufferattempts ~17 GB allocation with crafted dimensions; ASAN RSS limit triggersNote: This OOM only fires under ASAN's memory limit (fuzzing context). The
fuzz_regressionharness has norun_limits_boundarieshelper, so the seed passescargo testwithout a fix — same situation as the prior seedlimits_boundaries-crash-9947b87f07e9(see PR #7). The seed is recorded to track the input; a separate fix toLimitsenforcement is the follow-up.Sweep Stats
limits_boundariesran only ~2 s before crashing on an existing corpus seed; the 33,700-exec count reflects that short run. All other targets completed the full 600 s window.https://claude.ai/code/session_01TtcdYQzUSAE9ZVT6sNXfAT
Generated by Claude Code