[ 
https://issues.apache.org/jira/browse/ARROW-1589?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16179136#comment-16179136
 ] 

Marco Neumann commented on ARROW-1589:
--------------------------------------

{quote}Please understand that this software we are discussing is primarily the 
work of a single volunteer developer (me)...{quote}

I am very thankful for your work. Arrow and parquet are absolutely amazing. I 
just want to help out. Integrating an automatic fuzzing solution is rather 
trivial (I actually have the corresponding PR nearly ready, just the usage docs 
are missing) and can prevent so many silly bugs (produces by smart people). I 
do NOT expect you to fix all bugs and problems found by the fuzzer, but it can 
help finding missing test coverage and could (on a long term) improve the 
stability of the library and the security aspect.

> [C++] Fuzzing for certain input formats
> ---------------------------------------
>
>                 Key: ARROW-1589
>                 URL: https://issues.apache.org/jira/browse/ARROW-1589
>             Project: Apache Arrow
>          Issue Type: Test
>            Reporter: Marco Neumann
>            Assignee: Marco Neumann
>
> The arrow lib should have fuzzing tests for certain input formats, e.g. for 
> reading record batches from streams. Ideally, malformed input must not crash 
> the system but must report a proper error. This could easily be implemented 
> e.g. w/ [libfuzzer|https://llvm.org/docs/LibFuzzer.html] in combination with 
> address sanitizer (that's already implemented by Arrow's build system).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to