vishalcoc44 opened a new pull request, #300:
URL: https://github.com/apache/calcite-avatica/pull/300

   Added Jazzer fuzzing to hit the actually important parts that had 0% 
OSS-Fuzz coverage:
   
   JsonService + Jackson (nested/garbage JSON in & out)
   ProtobufTranslationImpl (corrupted/truncated protobuf → POJO)
   TypedValue factory (nasty type codes, overflows, nulls, scales)
   AvaticaSite.get(...) (15+ JDBC/SQL types: DECIMAL precisions, timestamps, 
etc.)
   
   **Changes:**
   
   Added com.code_intelligence:jazzer-api to testImplementation 
(core/build.gradle.kts)
   New fuzzers in core/src/test/java/org/apache/calcite/avatica/fuzz/
   
   **Results so far:**
   
   Coverage in RPC + type layers went from ~0% → thousands of lines
   Catches bad payloads that could previously OOM, CPU spike, or throw ugly 
exceptions


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to