[tor-bugs] #21996 [Core Tor/Tor]: Should we treat BUG messages as fatal errors during fuzzing?

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#21996: Should we treat BUG messages as fatal errors during fuzzing?
------------------------------+--------------------------------
     Reporter:  Sebastian     |      Owner:
         Type:  defect        |     Status:  new
     Priority:  Medium        |  Milestone:  Tor: 0.3.1.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+--------------------------------
 While wondering why #21966 wasn't caught during consdiff code fuzzing, I
 noticed that in the C implementation failing to apply a generated diff is
 not a reason to assert, but rather an LD_BUG log message is generated.
 Unapplying the 21966 fix and fuzzing promptly leads to the discovery of
 that bug. I think it might make sense to ensure any BUG message that gets
 triggered fails an assertion if we're currently fuzzing?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21996>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs