LucaCappelletti94 commented on PR #2527: URL: https://github.com/apache/datafusion-sqlparser-rs/pull/2527#issuecomment-5735473092
No crash on the first fuzz runs is the expected outcome. The gate ran from an empty corpus, so libFuzzer had to rediscover the SQL grammar from random bytes, and a cold ten-minute window spends nearly all of its effort on grammar surface rather than deep paths. The parser also has five years of upstream fuzzing history, so the shallow crash surface was swept long ago. The detection power arrives in two steps, the nightly batch growing a shared corpus on the clusterfuzzlite branch and the planned parse -> Display -> re-parse target with a committed seed corpus turning that corpus productive from day one. What the first runs prove is the part that mattered, the ASF allowlist gate is open and the build-and-fuzz pipeline runs green on every pull request. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
