On Mon, Jan 15, 2024 at 8:51 PM Simon Josefsson <si...@josefsson.org> wrote: > > Package: wnpp > Severity: wishlist > Owner: Simon Josefsson <si...@josefsson.org> > > * Package name : golang-github-adamkorcz-go-fuzz-headers-1 > Version : 0.0~git20230919.8b5d3ce-1 > Upstream Author : Adam Korcz <a...@adalogics.com> > * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 > * License : Apache-2.0 > Programming Lang: Go > Description : helper functions for Go fuzzing (library) > > Various helper functions for go fuzzing. It is mostly used in combination > with go-fuzz (https://github.com/dvyukov/go-fuzz), but compatibility with > fuzzing in the standard library will also be supported. Any coverage guided > fuzzing engine that provides an array or slice of bytes can be used with > go-fuzz-headers. > . > go-fuzz-headers' approach to fuzzing structs is strongly inspired by > gofuzz (https://github.com/google/gofuzz). > > I hope to maintain this package as part of Debian Go Packaging Team: > > https://salsa.debian.org/go-team/packages/golang-github-adamkorcz-go-fuzz-headers-1/ >
Usually we don't run fuzz test when building packages, because it would waste a lot of buildd resource. In theory we don't need any fuzz related libraries. But upstream may mix their unit tests and fuzz tests in one source file, which makes it difficult to strip such tests and their libraries. The Go compiler by default wouldn't run fuzz tests. For packaging rekor, I think all these fuzz tests can be stripped by file names. It seems upstream just puts all fuzz tests in "fuzz_test.go". -- Shengjing Zhu
