Fuzz the serial console + parsers (finds a UB in backup import) - #7

Merged

Tomunek merged 14 commits into

hakierspejs:masterfrom

d33mobile:chore/fuzz-console

Jul 27, 2026

Commits on Jul 20, 2026

test: add libFuzzer harness for the serial console command interface

Claude
and
claude
committed
test: clang-format fuzz_console.c empty stub bodies

Claude
and
claude
committed
test: fuzzing dictionary + seeds + direct backup_import harness; measure & close coverage gaps

Claude
and
claude
committed
test: add fuzz-cov target to measure fuzzer coverage of the parse surface

Claude
and
claude
committed
test: direct totp_verify fuzz harness + login-accept seed to cover the TOTP accept path

Claude
and
claude
committed
test: structured backup_import seeds covering all validation/write branches

Claude
and
claude
committed
test: console seeds covering commands_keys handlers (success + error branches)

Claude
and
claude
committed
test: cover cmd_login clock-gated branches + commands_network via injectable-clock console seeds

Claude
and
claude
committed
test: console.c edge-case seeds (buffer-full, arg overflow, backspace, control bytes)

Claude
and
claude
committed
test: cover storage.c reachable branches (mount-fail/format, list-truncate, nonexistent) + document HW residuals

Claude
and
claude
committed
test: extended bounded fuzz campaigns (plateau confirmed / fix UBSan bool load in backup_import)

Claude
and
claude
committed
docs: fuzzing coverage summary + HW-unreachable gap map

Claude
and
claude
committed
test: seed commands.c arg-error + help-admin branches; correct FUZZING.md coverage numbers

Claude
and
claude
committed
test: libFuzzer harness for the NTP response parser (ntp_recv_cb)

Claude
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fuzz the serial console + parsers (finds a UB in backup import) - #7

Fuzz the serial console + parsers (finds a UB in backup import)#7
Tomunek merged 14 commits into
hakierspejs:masterfrom
d33mobile:chore/fuzz-console

Commits on Jul 20, 2026

test: add libFuzzer harness for the serial console command interface

test: clang-format fuzz_console.c empty stub bodies

test: fuzzing dictionary + seeds + direct backup_import harness; measure & close coverage gaps

test: add fuzz-cov target to measure fuzzer coverage of the parse surface

test: direct totp_verify fuzz harness + login-accept seed to cover the TOTP accept path

test: structured backup_import seeds covering all validation/write branches

test: console seeds covering commands_keys handlers (success + error branches)

test: cover cmd_login clock-gated branches + commands_network via injectable-clock console seeds

test: console.c edge-case seeds (buffer-full, arg overflow, backspace, control bytes)

test: cover storage.c reachable branches (mount-fail/format, list-truncate, nonexistent) + document HW residuals

test: extended bounded fuzz campaigns (plateau confirmed / fix UBSan bool load in backup_import)

docs: fuzzing coverage summary + HW-unreachable gap map

test: seed commands.c arg-error + help-admin branches; correct FUZZING.md coverage numbers

test: libFuzzer harness for the NTP response parser (ntp_recv_cb)