On 2016-03-09 22:17, Boris Zbarsky wrote:
On 3/9/16 3:47 PM, decoder...@googlemail.com wrote:
Actually no. I adapted our gtests in less than an hour.

Does this have to do with the set of things they're testing, or the
style the tests are written in?

I think the point is that some tests make it easy to set up fuzzing based on them. I think what makes it easy is that it has a some input data that it puts thru some API. For instance read some JS and either just parse it or even try to run it. Or read some image file and decode it, maybe even calling the needed functions to display it.

Clearly everything were you get (untrusted) data from somewhere it should be relatively easy to set up fuzzing for it, but maybe it should start with writing a test suite that takes that input and does something with it, and probably tries to expose it to as much as possible things as the real application would.

So maybe the question isn't about having standalone programs, but more about a test suite tries to deals with input data like a program that uses the API would do.


Kurt

_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to