dev-fuzz 0.9.1

Fuzz testing workflow for Rust. Wraps cargo-fuzz: budgeted runs, crash / timeout / OOM findings, deterministic reproducer paths, sanitizer choice, machine-readable verdicts. Part of the dev-* verification collection.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

use dev_fuzz::{FuzzBudget, FuzzFinding, FuzzFindingKind, FuzzResult, FuzzRun};
use std::time::Duration;

#[test]
fn smoke_default_budget_is_time() {
    let r = FuzzRun::new("target", "0.1.0");
    match r.fuzz_budget() {
        FuzzBudget::Time(d) => assert_eq!(d, Duration::from_secs(60)),
        _ => panic!("default should be time-based"),
    }
}

#[test]
fn smoke_executions_budget() {
    let r = FuzzRun::new("target", "0.1.0").budget(FuzzBudget::executions(1_000_000));
    match r.fuzz_budget() {
        FuzzBudget::Executions(n) => assert_eq!(n, 1_000_000),
        _ => panic!("expected executions"),
    }
}

#[test]
fn smoke_empty_findings_passes() {
    let r = FuzzResult {
        target: "t".into(),
        version: "0.1.0".into(),
        executions: 1_000,
        findings: Vec::new(),
    };
    let report = r.into_report();
    assert!(report.passed());
}

#[test]
fn smoke_crash_produces_critical_failure() {
    let r = FuzzResult {
        target: "t".into(),
        version: "0.1.0".into(),
        executions: 100,
        findings: vec![FuzzFinding {
            kind: FuzzFindingKind::Crash,
            reproducer_path: "crash-input".into(),
            summary: "panic".into(),
        }],
    };
    let report = r.into_report();
    assert!(report.failed());
}

#[test]
fn smoke_timeout_produces_warning() {
    let r = FuzzResult {
        target: "t".into(),
        version: "0.1.0".into(),
        executions: 100,
        findings: vec![FuzzFinding {
            kind: FuzzFindingKind::Timeout,
            reproducer_path: "slow-input".into(),
            summary: "exceeded timeout".into(),
        }],
    };
    let report = r.into_report();
    // Warn verdict (not Fail) — timeout severity is Warning.
    assert!(report.failed() || report.warned());
}

#[test]
fn smoke_reproducer_attached_as_evidence() {
    let r = FuzzResult {
        target: "t".into(),
        version: "0.1.0".into(),
        executions: 100,
        findings: vec![FuzzFinding {
            kind: FuzzFindingKind::Crash,
            reproducer_path: "fuzz/artifacts/crash-deadbeef".into(),
            summary: "test".into(),
        }],
    };
    let report = r.into_report();
    let check = &report.checks[0];
    assert!(!check.evidence.is_empty());
}