envoyproxy/envoy

CacheFilter: Fuzz inputs from downstream, upstream, and cache

Open

#9,871 opened on Jan 29, 2020

View on GitHub
 (3 comments) (0 reactions) (0 assignees)C++ (5,373 forks)batch import
area/cachearea/fuzzinghelp wanted

Repository metrics

Stars
 (27,997 stars)
PR merge metrics
 (Avg merge 8d) (378 merged PRs in 30d)

Description

CacheFilter and associated classes (#868) are exposed to untrusted intputs from downstream, upstream, and from cached entries. These inputs should be fuzzed.

Contributor guide

Research direction
Write a fuzz target for CacheFilter that generates inputs from downstream, upstream, and cache.
Tech stack
cpp
Domain
backend
Issue type
Test
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
C++GitFuzzing basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60