[openssl/openssl] c263ea: Fix fuzz test to handle memory failures

"'Jakub Zelenka' via openssl-commits" <[email protected]> Wed, 15 Jul 2026 09:02:37 -0700
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/master/[email protected]>
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: c263ea553c1d19f12d0040ecd184e4bf4e054af3
      https://github.com/openssl/openssl/commit/c263ea553c1d19f12d0040ecd184e4bf4e054af3
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-07-15 (Wed, 15 Jul 2026)

  Changed paths:
    M fuzz/acert.c
    M fuzz/asn1.c
    M fuzz/bignum.c
    M fuzz/bndiv.c
    M fuzz/client.c
    M fuzz/cmp.c
    M fuzz/cms.c
    M fuzz/conf.c
    M fuzz/crl.c
    M fuzz/ct.c
    M fuzz/decoder.c
    M fuzz/dtlsclient.c
    M fuzz/dtlsserver.c
    M fuzz/hashtable.c
    M fuzz/ml-dsa.c
    M fuzz/ml-kem.c
    M fuzz/pem.c
    M fuzz/pkcs12.c
    M fuzz/provider.c
    M fuzz/quic-client.c
    M fuzz/quic-srtm.c
    M fuzz/server.c
    M fuzz/slh-dsa.c
    M fuzz/smime.c
    M fuzz/v3name.c
    M fuzz/x509.c

  Log Message:
  -----------
  Fix fuzz test to handle memory failures

It also fixes related memory leaks and removes extensive asserts that
should not be present in fuzzy tests.

Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Wed Jul 15 16:01:42 2026
(Merged from https://github.com/openssl/openssl/pull/30944)


  Commit: dca561d4cdb84c7e813e9b28352928edd5b2cfd8
      https://github.com/openssl/openssl/commit/dca561d4cdb84c7e813e9b28352928edd5b2cfd8
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-07-15 (Wed, 15 Jul 2026)

  Changed paths:
    M .github/workflows/ci.yml
    M fuzz/build.info
    M fuzz/test-corpus.c
    M test/recipes/fuzz.pl
    M util/perl/OpenSSL/Test.pm

  Log Message:
  -----------
  Integrate mfail functionality to fuzz tests

Run the fuzz corpora under mfail in addition to the normal path, so the
existing inputs also exercise malloc-failure handling. The fuzz.pl harness
sizes the mfail runs to a time budget and, on a leak, bisects down to the
exact file and injection point. Adds a budgeted asan/ubsan CI job to run it.

Assisted-by: Claude:claude-opus-4-6

Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Wed Jul 15 16:01:43 2026
(Merged from https://github.com/openssl/openssl/pull/30944)


Compare: https://github.com/openssl/openssl/compare/857afd02b282...dca561d4cdb8

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/857afd-dca561%40github.com.