[tor-bugs] #16301 [Tor]: Add afl-fuzz instructions to contrib

[Tor Bug Tracker & Wiki]

#16301: Add afl-fuzz instructions to contrib
-----------------------------+---------------------------------
     Reporter:  teor         |      Owner:  teor
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:  Tor: very long term
    Component:  Tor          |    Version:
   Resolution:               |   Keywords:  lorax
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------------------

Comment (by asn):

 Good idea. More fuzzing!

 I think Tor would have to expose its cell parsers and directory documents
 parsers for this to work nicely. I don't expect afl-fuzzb to ever be able
 to generate actual Tor traffic.

 Maybe we could switch Tor to fuzzing mode using a CLI switch, and then you
 can just feed it descriptors/consensuses/cell data on stdin or something.

 How is other software doing this?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16301#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online