zotregistry.dev/zot@v1.4.4-0.20240314164342-eec277e14d20/README_fuzz.md (about)

     1  # Fuzzing in Zot
     2  
     3  This project makes use of native Go 1.18 fuzzing. An in-depth tutorial for fuzzing in Go can be found [here](https://go.dev/doc/fuzz/).
     4  As language specifies, fuzz tests are included among unit-tests, inside the the same `*_test.go files`, in the packages they intend to fuzz. See [fuzzing for local storage](pkg/storage/local_test.go)
     5  
     6  Zot doesn't store the test data for fuzzing in the same repo, nor it is added before fuzzing with `(*testing.F).Add` . Instead, it is stored in a separate repo called [test-data](https://github.com/project-zot/test-data).
     7  
     8  To start fuzzing locally, one can use the Make target [fuzz-all](Makefile) .
     9  **The default runtime for each fuzz test is 10s**, which can be overriden with the **fuzztime** variable
    10  ```
    11  make fuzz-all fuzztime=20
    12  ```
    13  By running this target, testdata for fuzzing gets downloaded from the previously mentioned repo and the fuzzing begins for every fuzz function that is found.