Skip to content

Commit d8b1672

Browse files
manuniomanunio
committed
fuzz: initial integration
 - Adds initial fuzz_target for Handlebars.compile() - Adds Jazzer.js as dev-dependency - Adds fuzzing on Github CI
1 parent 1fc4ef0 commit d8b1672

File tree

62 files changed

+2878
-414
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

62 files changed

+2878
-414
lines changed

‎.github/workflows/ci.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,10 @@ jobs:
5858
cd ./tests/integration/webpack-babel-test && ./test.sh && cd -
5959
cd ./tests/integration/webpack-test && ./test.sh && cd -
6060
61+
- name: Fuzz Test
62+
# Runs for 3 minutes
63+
run: cd ./fuzz && ./test.sh 180 && cd -
64+
6165
browser:
6266
name: Test (Browser)
6367
runs-on: 'ubuntu-22.04'

‎fuzz/README.md

Lines changed: 45 additions & 0 deletions

‎fuzz/compiler.fuzz.js

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
const Handlebars = require('../dist/cjs/handlebars')['default'];
2+
3+
const ignored = [
4+
'Parse error',
5+
'Lexical error',
6+
`doesn't match`,
7+
'Invalid path',
8+
'Unsupported number of partial arguments',
9+
];
10+
11+
function ignoredError(error) {
12+
return !!ignored.some((message) => error.message.includes(message));
13+
}
14+
15+
/**
16+
* @param {Buffer} data
17+
*/
18+
module.exports.fuzz = function (data) {
19+
try {
20+
const ast = Handlebars.parse(data.toString());
21+
Handlebars.compile(ast, {});
22+
} catch (error) {
23+
if (error.message && !ignoredError(error)) {
24+
throw error;
25+
}
26+
}
27+
};

‎fuzz/corpus/compiler.fuzz/049e4aa6076c8e4c87f9d10c0194228c6fdfd8b6

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes as |value index|}}{{index}}. {{value.text}}!{{/each}}

‎fuzz/corpus/compiler.fuzz/10d14556dcdc478fe0df984e0743bb72634f92a6

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{this}}{{/goodbyes}}{{^goodbyes}}Right On!{{/goodbyes}}

‎fuzz/corpus/compiler.fuzz/177d2dae884490b937c7c004b750c45bba7d731b

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes}}{{@index}}. {{text}}! {{/each}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/1e6bfe29056662482a7fc7e724ab1139fd8f087f

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}\n{{name}}\n{{else if none}}\n{{none}}\n{{^}}\n{{/people}}\n

‎fuzz/corpus/compiler.fuzz/1f0ef523dad6722ca31003812b64347679b430e3

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}{{name}}{{else if none}}{{none}}{{/people}}

‎fuzz/corpus/compiler.fuzz/220dde18dfb07f093dc5a64be5b71797264176b3

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}{{name}}{{else if none}}{{none}}{{else}}fail{{/people}}

‎fuzz/corpus/compiler.fuzz/24a7c760429e57cb3a204aebf6124b83a91c21b9

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{../name}}{{../name}}{{/goodbyes}}

‎fuzz/corpus/compiler.fuzz/325ad48a5aaa0a33f2d122a1f1e5012b882f8eef

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{foo.bar (baz bat=1)}}

‎fuzz/corpus/compiler.fuzz/345411d48fafb2941b540e7465e260e9fd108825

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#with person as |foo|}}{{foo.first}} {{last}}{{/with}}

‎fuzz/corpus/compiler.fuzz/359a4cd9b9cb6fc0539da3a89d3a6b169048f419

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes}}{{@index}}. {{text}}! {{#each ../goodbyes}}{{@index}} {{/each}}After {{@index}} {{/each}}{{@index}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/377ccad52355aeec2799cd6fe1814eb0d35ecbb0

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes as |value index|}}{{index}}. {{value.text}}! {{#each ../goodbyes as |childValue childIndex|}} {{index}} {{childIndex}}{{/each}} After {{index}} {{/each}}{{index}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/479c14fbc04f9b507295d766983410f69cb33651

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
\n {{#if}}\n{{/def}}

‎fuzz/corpus/compiler.fuzz/541ee4fffafb12da4a8ad4c35d3b74f837fa666b

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{text}}! {{/goodbyes}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/571ed3dcd0160af551c641afb7fdc77263706894

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#outer}}Goodbye {{#inner}}cruel {{omg}}{{/inner}}{{/outer}}

‎fuzz/corpus/compiler.fuzz/68b88717c0b2df6a4a3de21c4d769d451c682fa7

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#helper}}{{*decorator}}{{/helper}}

‎fuzz/corpus/compiler.fuzz/6bfc672351bbb03a31a585bc2a6f2c39659ed6ea

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{text}} cruel {{../name}}! {{/goodbyes}}

‎fuzz/corpus/compiler.fuzz/75be635b36860c89b89925071b3be70eaadc620d

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#outer}}Goodbye {{#inner}}cruel {{../sibling}} {{../../omg}}{{/inner}}{{/outer}}

‎fuzz/corpus/compiler.fuzz/7778d3ba28e00fe7932c0b76072d47e808f2af75

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#foo}} {{/foo}}

‎fuzz/corpus/compiler.fuzz/77c7281e90c74b6d24fa8354bf5a4af5da04b175

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}\n{{name}}\n{{^}}\n{{none}}\n{{/people}}\n'

‎fuzz/corpus/compiler.fuzz/788d1b5577729daba2f4bc759f7088e93b8a9d75

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{foo.bar baz "foo" true false bat=1}}

‎fuzz/corpus/compiler.fuzz/8ab76bb91bc93adef82538cee689f5182e50b770

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#foo}} {{foo}}{{/foo}}

‎fuzz/corpus/compiler.fuzz/9039e59adf416f481d16e698e97e5224a62e09be

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#if goodbye includeZero=true}}GOODBYE {{/if}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/9b057b8346de564353fdfb28f93d2bc8eeb25b9d

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#helper}}{{*decorator foo}}{{/helper}}

‎fuzz/corpus/compiler.fuzz/9bd641c7d52363fd042a59e9ff2ea5efa4e6bdd6

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{text}} cruel {{foo/../name}}! {{/goodbyes}}

‎fuzz/corpus/compiler.fuzz/9c973dfdc395aa5a7b61930555454baa2c040d30

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#helper}}{{#*decorator}}success{{/decorator}}{{/helper}}

‎fuzz/corpus/compiler.fuzz/a4210f0ffc7681710c774caed72c55c0a8b2dcb5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#none}}\n{{.}}\n{{^}}\nFail\n{{/none}}\n

‎fuzz/corpus/compiler.fuzz/a54780eb3853807872501547fa05816821a8ce65

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}\n{{name}}\n{{else if none}}\n{{none}}\n{{/people}}\n'

‎fuzz/corpus/compiler.fuzz/a612a6be8064d1c23c1f1bd6044080b0b3d696b7

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each person}}{{#with .}}{{first}} {{last}}{{/with}}{{/each}}

‎fuzz/corpus/compiler.fuzz/aea23e0178cca7f24c5154677191f4052aedef89

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}{{name}}{{^}}{{none}}{{/people}}

‎fuzz/corpus/compiler.fuzz/b1725265f4a3d72f5b14025cbe505eae3ab952e5

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each data}}{{@index}}:{{a}} {{/each}}

‎fuzz/corpus/compiler.fuzz/b8667a687aa3152044123f9b7edc48c2df35d17b

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#data}}\n{{#if true}}\n{{.}}\n{{/if}}\n{{/data}}\nOK.

‎fuzz/corpus/compiler.fuzz/b943e7c833f314d19dfeebacc0d9cce72353f838

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#if goodbye}}GOODBYE {{/if}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/c428bff0953db1418224d111cb6aa4acffbb6e80

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{foo}}

‎fuzz/corpus/compiler.fuzz/c7a41bfe4d495b72015c1a27378e4eca2ab43974

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}{{name}}{{else if none}}{{none}}{{/if}}

‎fuzz/corpus/compiler.fuzz/cc11925603f5dac917d2ee315a651ad66b048406

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{foo.bar baz bat=1}}

‎fuzz/corpus/compiler.fuzz/cf0f1476c57ef0df5e436777250049aa52c889c2

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{*decorator foo}}

‎fuzz/corpus/compiler.fuzz/d33e71cc5dd85a36dc84c8bf12dabc0624e3967d

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}{{name}}{{else if nothere}}fail{{else unless nothere}}{{none}}{{/people}}

‎fuzz/corpus/compiler.fuzz/d3ae5d5af973778c7b0cd938bd75cee20c5f0037

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{@index}}. {{text}}! {{/goodbyes}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/dbc7b50baec9f9d29021604856f56bc73f378a5b

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes}}{{#if @first}}{{text}}! {{/if}}{{/each}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/dccbe9317b88449ef1e3b7b82060dfd89fcf1bc2

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#helper}}{{#*decorator}}{{#*nested}}suc{{/nested}}cess{{/decorator}}{{/helper}}

‎fuzz/corpus/compiler.fuzz/ddd1b10efb1b50e68c0172d5d5a0da88adc24604

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#with person}}{{first}} {{last}}{{/with}}

‎fuzz/corpus/compiler.fuzz/df2c4e4bd47373f5365e314084a82d08846d6568

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{text}}{{/goodbyes}} {{#goodbyes}}{{text}}{{/goodbyes}}

‎fuzz/corpus/compiler.fuzz/e2a0e338fc07eaf160bfb0977e398b7627bd6c21

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes}}{{text}}! {{/each}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/e35b817b11839df03d4da6e1d93d829fad305788

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#outer}}Goodbye {{#inner}}cruel {{omg.yes}}{{/inner}}{{/outer}}

‎fuzz/corpus/compiler.fuzz/e3d4807bde97804672139e5a0b194be4943263a2

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#with person}}Person is present{{else}}Person is not present{{/with}}'

‎fuzz/corpus/compiler.fuzz/e42f86f8128679fc2edadb3579fbbfd3c4a7e5dd

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#each goodbyes}}{{@key}}. {{text}}! {{/each}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/e73f9110dae281e494e6df91ac56f86c5116b2e2

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
<b>#1</b>. goodbye! 2. GOODBYE! cruel world!

‎fuzz/corpus/compiler.fuzz/e788c92d3e4eba1571d6c89345be815064363eae

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#helper}}{{#*decorator}}suc{{/decorator}}{{#*decorator}}cess{{/decorator}}{{/helper}}

‎fuzz/corpus/compiler.fuzz/f1d2d2f924e986ac86fdf7b36c94bcdf32beec15

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
foo

‎fuzz/corpus/compiler.fuzz/f3c05d4e447d686faa78e8784a4b528b4ec044c3

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#none}}\n{{.}}\n{{^}}\n{{none}}\n{{/none}}\n

‎fuzz/corpus/compiler.fuzz/f422726a28d4ee1c785cb66c2233ce4e5892bdfb

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#goodbyes}}{{/goodbyes}}cruel {{world}}!

‎fuzz/corpus/compiler.fuzz/f6cd65165fede63d9c262cc983b4bfd28e91a7b8

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{foo.bar}}

‎fuzz/corpus/compiler.fuzz/fb7eadc1d17bffee94eac2c2f7160ea58615304b

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#with foo}}{{#if goodbye}}GOODBYE cruel {{../world}}!{{/if}}{{/with}}

‎fuzz/corpus/compiler.fuzz/fc105bb181fd4b89c4c70db143d6736d02b1a96c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{*decorator "success"}}

‎fuzz/corpus/compiler.fuzz/fe6f8d8f27df2ede214191fd0baeb3e7efb9c039

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#people}}\n{{name}}\n{{^}}\n{{none}}\n{{/people}}\n

‎fuzz/corpus/compiler.fuzz/fed10ca600aaee904b9bd07e6f438324fdf23fad

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{{#helper}}{{*decorator}}suc{{/helper}}

‎fuzz/test.sh

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
#!/bin/bash
2+
3+
set -e
4+
5+
if [ $# -eq 0 ]; then
6+
echo "Usage: $0 <max_total_time>
7+
The <max_total_time> is passed to the internal fuzzing engine
8+
(libFuzzer) to stop the fuzzing run after 'N' seconds."
9+
exit 1
10+
fi
11+
12+
max_total_time=$1
13+
14+
for i in ./*.fuzz.js; do
15+
target=$(basename "$i" .js)
16+
echo "-- Running $target for $max_total_time seconds."
17+
npx jazzer $target corpus/$target --sync -- -max_total_time=$max_total_time;
18+
done

0 commit comments

Comments
 (0)