dev-fuzz 0.9.0

Fuzzing harness integration for Rust. Wraps cargo-fuzz. Findings emitted as machine-readable reports. Part of the dev-* verification suite.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

//! Configure per-iteration timeout, RSS limit, and sanitizer.
//!
//! ```text
//! cargo run --example with_limits
//! ```

use std::time::Duration;

use dev_fuzz::{FuzzBudget, FuzzError, FuzzRun, Sanitizer};

fn main() {
    let run = FuzzRun::new("parse_input", "0.1.0")
        .budget(FuzzBudget::time(Duration::from_secs(30)))
        .sanitizer(Sanitizer::Address)
        .timeout_per_iter(Duration::from_secs(5))
        .rss_limit_mb(2048)
        .allow("crash-known-false-positive");

    match run.execute() {
        Ok(r) => println!("done: {} findings", r.findings.len()),
        Err(FuzzError::ToolNotInstalled) | Err(FuzzError::NightlyRequired) => {
            eprintln!("cargo-fuzz / nightly missing; skipping example.");
        }
        Err(e) => eprintln!("fuzz run failed: {e}"),
    }
}