mirror of
https://github.com/outbackdingo/optimclaw.git
synced 2026-08-26 15:40:18 +00:00
[email protected]andClaude Opus 4.6
e41eb8ae33
Add cargo-fuzz infrastructure with 5 fuzz targets exercising security-critical code paths: - fuzz_safety_sanitizer: Aho-Corasick + regex injection detection - fuzz_safety_validator: Input validation (length, encoding, patterns) - fuzz_leak_detector: Secret leak scanning (API keys, tokens) - fuzz_tool_params: Tool parameter JSON validation - fuzz_config_env: TOML/JSON config parsing Each target exercises real IronClaw business logic with invariant assertions. Includes corpus directories and setup documentation. Co-Authored-By: Claude Opus 4.6 <[email protected]>
41 lines
681 B
TOML
41 lines
681 B
TOML
[package]
|
|
name = "ironclaw-fuzz"
|
|
version = "0.0.0"
|
|
publish = false
|
|
edition = "2021"
|
|
|
|
[package.metadata]
|
|
cargo-fuzz = true
|
|
|
|
[dependencies]
|
|
libfuzzer-sys = "0.4"
|
|
serde_json = "1"
|
|
|
|
[dependencies.ironclaw]
|
|
path = ".."
|
|
|
|
[[bin]]
|
|
name = "fuzz_safety_sanitizer"
|
|
path = "fuzz_targets/fuzz_safety_sanitizer.rs"
|
|
doc = false
|
|
|
|
[[bin]]
|
|
name = "fuzz_safety_validator"
|
|
path = "fuzz_targets/fuzz_safety_validator.rs"
|
|
doc = false
|
|
|
|
[[bin]]
|
|
name = "fuzz_leak_detector"
|
|
path = "fuzz_targets/fuzz_leak_detector.rs"
|
|
doc = false
|
|
|
|
[[bin]]
|
|
name = "fuzz_tool_params"
|
|
path = "fuzz_targets/fuzz_tool_params.rs"
|
|
doc = false
|
|
|
|
[[bin]]
|
|
name = "fuzz_config_env"
|
|
path = "fuzz_targets/fuzz_config_env.rs"
|
|
doc = false
|