【Go官方文档】Getting started with fuzzing

1

go mod init example/fuzz

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

package main

import (
    "errors"
    "fmt"
    "unicode/utf8"
)

func main() {
    input := "The quick brown fox jumped over the lazy dog"
    rev, revErr := Reverse(input)
    doubleRev, doubleRevErr := Reverse(rev)
    fmt.Printf("original: %q\n", input)
    fmt.Printf("reversed: %q, err: %v\n", rev, revErr)
    fmt.Printf("reversed again: %q, err: %v\n", doubleRev, doubleRevErr)
}

func Reverse(s string) (string, error) {
    if !utf8.ValidString(s) {
        return s, errors.New("input is not valid UTF-8")
    }
    r := []rune(s) // type rune = int32； Go 语言通过 rune 处理中文，支持国际化多语言。
    for i, j := 0, len(r)-1; i < len(r)/2; i, j = i+1, j-1 {
        r[i], r[j] = r[j], r[i]
    }
    return string(r), nil
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

package main

import (
	"testing"
	"unicode/utf8"
)

func FuzzReverse(f *testing.F) {
	testcases := []string{"Hello, world", " ", "!12345"}
	for _, tc := range testcases {
		f.Add(tc) // Use f.Add to provide a seed corpus
	}
	f.Fuzz(func(t *testing.T, orig string) {
		rev, err1 := Reverse(orig)
		if err1 != nil {
			return
		}
		doubleRev, err2 := Reverse(rev)
		if err2 != nil {
			return
		}
		if orig != doubleRev {
			t.Errorf("Before: %q, after: %q", orig, doubleRev)
		}
		if utf8.ValidString(orig) && !utf8.ValidString(rev) {
			t.Errorf("Reverse produced invalid UTF-8 string %q", rev)
		}
	})
}

1

go test

1
2

PASS
ok      example/fuzz    0.265s

1

go test -fuzz=Fuzz -fuzztime 30s

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

fuzz: elapsed: 0s, gathering baseline coverage: 0/47 completed
fuzz: elapsed: 0s, gathering baseline coverage: 47/47 completed, now fuzzing with 8 workers
fuzz: elapsed: 3s, execs: 474042 (156924/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 6s, execs: 950684 (159465/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 9s, execs: 1404211 (151611/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 12s, execs: 1902552 (165197/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 15s, execs: 2389600 (162590/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 18s, execs: 2876083 (162669/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 21s, execs: 3355965 (159985/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 24s, execs: 3844976 (162641/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 27s, execs: 4344065 (166235/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 30s, execs: 4846000 (167419/sec), new interesting: 0 (total: 47)
fuzz: elapsed: 30s, execs: 4846000 (0/sec), new interesting: 0 (total: 47)
PASS
ok      example/fuzz    30.413s