README
¶
Istio fuzzing
Istio has a series of fuzzers that run continuously through OSS-fuzz.
Native fuzzers
While many jobs are still using the old go-fuzz style fuzzers, using Go 1.18 native fuzzing is preferred.
These should be written alongside standard test packages.
Currently, these cannot be in <pkg>_test packages; instead move them to a file under <pkg>.
Fuzz jobs will be run in unit test mode automatically (i.e. run once) and as part of OSS-fuzz.
Local testing
To run the fuzzers, follow these steps:
git clone --depth=1 https://github.com/google/oss-fuzz.git
cd oss-fuzz
python infra/helper.py build_image istio
python infra/helper.py build_fuzzers istio ~/go/src/istio.io/istio
Reproduce failure:
python infra/helper.py reproduce istio FuzzX ~/Downloads/clusterfuzz-testcase-minimized-FuzzX-1234
Run:
python infra/helper.py run_fuzzer istio FuzzValidateMeshConfig
Documentation
¶
Overview ¶
nolint: revive
nolint: revive
nolint: revive
Index ¶
- func FuzzAggregateController(data []byte) int
- func FuzzAnalyzer(data []byte) int
- func FuzzBNMUnmarshalJSON(data []byte) int
- func FuzzCRDRoundtrip(data []byte) int
- func FuzzCheckIstioOperatorSpec(data []byte) int
- func FuzzCidrRange(data []byte) int
- func FuzzCompareDiff(data []byte) int
- func FuzzConfigValidation(data []byte) int
- func FuzzConfigValidation2(data []byte) int
- func FuzzConfigValidation3(data []byte) int
- func FuzzConvertIngressV1alpha3(data []byte) int
- func FuzzConvertIngressVirtualService(data []byte) int
- func FuzzCreateCertE2EUsingClientCertAuthenticator(data []byte) int
- func FuzzExtractIDs(data []byte) int
- func FuzzFindRootCertFromCertificateChainBytes(data []byte) int
- func FuzzGalleyDiag(data []byte) int
- func FuzzGenCSR(data []byte) int
- func FuzzGetEnabledComponents(data []byte) int
- func FuzzGrpcGenGenerate(data []byte) int
- func FuzzHeaderMatcher(data []byte) int
- func FuzzHelmReconciler(data []byte) int
- func FuzzHostMatcher(data []byte) int
- func FuzzHostMatcherWithRegex(data []byte) int
- func FuzzInitContext(data []byte) int
- func FuzzIntoResourceFile(data []byte) int
- func FuzzJwtUtil(data []byte) int
- func FuzzKubeCRD(data []byte) int
- func FuzzMetadataListMatcher(data []byte) int
- func FuzzNewBootstrapServer(data []byte) int
- func FuzzNewControlplane(data []byte) int
- func FuzzOverlayIOP(data []byte) int
- func FuzzParseInputs(data []byte) int
- func FuzzParseMeshNetworks(data []byte) int
- func FuzzParsePemEncodedCertificateChain(data []byte) int
- func FuzzPemCertBytestoString(data []byte) int
- func FuzzReconcileStatuses(data []byte) int
- func FuzzRenderManifests(data []byte) int
- func FuzzResolveK8sConflict(data []byte) int
- func FuzzTranslateFromValueToSpec(data []byte) int
- func FuzzUnmarshalAndValidateIOPS(data []byte) int
- func FuzzUpdateVerifiedKeyCertBundleFromFile(data []byte) int
- func FuzzV1Alpha1ValidateConfig(data []byte) int
- func FuzzValidateClusters(data []byte) int
- func FuzzValidateMeshConfig(data []byte) int
- func FuzzVerifyCertificate(data []byte) int
- func FuzzWE(data []byte) int
- func FuzzXds(data []byte) int
- func FuzzYAMLManifestPatch(data []byte) int
- func NewS(f *fuzz.ConsumeFuzzer) (*model.Service, error)
- func NewSI(f *fuzz.ConsumeFuzzer) (*model.ServiceInstance, error)
- func ValidateTestOptions(to core.TestOptions) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func FuzzAggregateController ¶
FuzzAggregateController implements a fuzzer that targets the add and delete registry apis of the aggregate controller. It does so by creating a controller with a pseudo-random Options{} and create pseudo-random service registries and deleting them.
func FuzzBNMUnmarshalJSON ¶
func FuzzCRDRoundtrip ¶
FuzzRoundtrip tests whether the pilot CRDs can be encoded and decoded.
func FuzzCidrRange ¶
func FuzzCompareDiff ¶
func FuzzConfigValidation ¶
func FuzzConfigValidation2 ¶
FuzzConfigValidation2 implements a second fuzzer for config validation. The fuzzer targets the same API as FuzzConfigValidation above, but its approach to creating a fuzzed config is a bit different in that it utilizes Istio APIs to generate a Spec from json. We currently run both continuously to compare their performance.
func FuzzConfigValidation3 ¶
func FuzzExtractIDs ¶
func FuzzFindRootCertFromCertificateChainBytes ¶
FindRootCertFromCertificateChainBytesFuzz implements a fuzzer that tests util.FindRootCertFromCertificateChainBytes
func FuzzGalleyDiag ¶
func FuzzGenCSR ¶
func FuzzGrpcGenGenerate ¶
func FuzzHeaderMatcher ¶
func FuzzHelmReconciler ¶
func FuzzHostMatcher ¶
func FuzzInitContext ¶
Creates an Environment with fuzzed values and passes that to InitContext
func FuzzIntoResourceFile ¶
func FuzzJwtUtil ¶
func FuzzKubeCRD ¶
FuzzKubeCRD implements a fuzzer that targets the kube CRD in two steps. It first creates an object with a config that has had pseudo-random values inserted. When a valid object has been created, it tries and convert that object. If this conversion fails, it panics.
func FuzzMetadataListMatcher ¶
func FuzzNewBootstrapServer ¶
func FuzzNewControlplane ¶
func FuzzOverlayIOP ¶
func FuzzParseInputs ¶
func FuzzParseMeshNetworks ¶
func FuzzParsePemEncodedCertificateChain ¶
FuzzParsePemEncodedCertificateChain implements a fuzzer that tests ParsePemEncodedCertificateChain
func FuzzPemCertBytestoString ¶
FuzzPemCertBytestoString implements a fuzzer that tests PemCertBytestoString
func FuzzReconcileStatuses ¶
FuzzReconcileStatuses implements a fuzzer that targets status.ReconcileStatuses. It does so by inserting pseudo-random vlues in the config and the progress as well as pass a pseudo-random generation parameter.
func FuzzRenderManifests ¶
func FuzzResolveK8sConflict ¶
func FuzzUpdateVerifiedKeyCertBundleFromFile ¶
FuzzUpdateVerifiedKeyCertBundleFromFile implements a fuzzer that tests UpdateVerifiedKeyCertBundleFromFile
func FuzzValidateClusters ¶
func FuzzValidateMeshConfig ¶
func FuzzVerifyCertificate ¶
FuzzVerifyCertificate implements a fuzzer that tests util.VerifyCertificate
func FuzzWE ¶
FuzzWE implements a fuzzer that targets several apis in the workloadentry package. It does so by setting up a workloadentry controller with a proxy with pseudo-random values. The fuzzer then uses the controller to test: 1: OnConnect 2: OnDisconnect 3: QueueWorkloadEntryHealth
func FuzzYAMLManifestPatch ¶
func NewSI ¶
func NewSI(f *fuzz.ConsumeFuzzer) (*model.ServiceInstance, error)
Creates a new fuzzed ServiceInstance
func ValidateTestOptions ¶
func ValidateTestOptions(to core.TestOptions) error
Types ¶
This section is empty.
Source Files
¶
- aggregate_controller_fuzzer.go
- analyzer_fuzzer.go
- autoregistration_controller_fuzzer.go
- bootstrap_fuzzer.go
- compare_fuzzer.go
- config_validation_fuzzer.go
- crd_roundtrip_fuzzer.go
- fuzz.go
- helm_reconciler_fuzzer.go
- inject_fuzzer.go
- kube_crd_fuzzer.go
- kube_ingress_fuzzer.go
- mesh_fuzzer.go
- misc_fuzzers.go
- operator_translate_fuzzer.go
- pilot_model_fuzzer.go
- pilot_networking_fuzzer.go
- pilot_security_fuzzer.go
- pkg_util_fuzzer.go
- pki_fuzzer.go
- security_fuzzer.go
- status_fuzzer.go
- v1alpha3_fuzzer.go
- xds_fuzzer.go
Directories