2016-11-18 19:56:01 +00:00
|
|
|
# ClusterFuzz
|
|
|
|
|
|
|
|
ClusterFuzz is the infrastructure behind OSS-Fuzz, and started as fuzzing
|
|
|
|
infrastructure for Chrome.
|
|
|
|
|
|
|
|
## Web interface
|
|
|
|
|
2016-11-18 20:01:58 +00:00
|
|
|
ClusterFuzz also provides [web interface](https://clusterfuzz-external.appspot.com/v2)
|
|
|
|
to view statistics about your fuzzer targets, as well as current crashes.
|
2016-11-18 19:56:01 +00:00
|
|
|
|
|
|
|
Note that access is restricted to library developers that we auto CC on new bug
|
|
|
|
reports.
|
|
|
|
|
|
|
|
## Fuzzer stats
|
|
|
|
|
|
|
|
You can view statistics about your fuzzers (e.g. speed, coverage information) on
|
|
|
|
our fuzzer statistics dashboard.
|
|
|
|
|
|
|
|
![stats]
|
2016-11-18 19:58:18 +00:00
|
|
|
(https://raw.githubusercontent.com/google/oss-fuzz/master/docs/freetype_stats.png)
|
2016-11-18 19:56:01 +00:00
|
|
|
|
|
|
|
## Coverage reports
|
|
|
|
|
2016-11-18 20:01:58 +00:00
|
|
|
We also provide coverage reports, where we highlight the parts of source code that are being
|
|
|
|
reached by your fuzzer.
|
2016-11-18 19:56:01 +00:00
|
|
|
|
|
|
|
![coverage_1]
|
2016-11-18 19:58:18 +00:00
|
|
|
(https://raw.githubusercontent.com/google/oss-fuzz/master/docs/freetype_coverage_1.png)
|
2016-11-18 19:56:01 +00:00
|
|
|
|
|
|
|
![coverage_2]
|
2016-11-18 19:58:18 +00:00
|
|
|
(https://raw.githubusercontent.com/google/oss-fuzz/master/docs/freetype_coverage_2.png)
|
2016-11-18 19:56:01 +00:00
|
|
|
|
|
|
|
## Testcase reports
|
|
|
|
|
|
|
|
ClusterFuzz will automatically de-duplicate and file reproducible crashes into
|
|
|
|
our [bug tracker](https://bugs.chromium.org/p/monorail). We provide a crash
|
|
|
|
report page that gives you the stack trace, a link to the crashing testcase, and
|
|
|
|
regression ranges where the bug was most likely introduced.
|
|
|
|
|
|
|
|
![report]
|
2016-11-18 19:58:18 +00:00
|
|
|
(https://raw.githubusercontent.com/google/oss-fuzz/master/docs/pcre2_testcase.png)
|
2016-11-18 19:56:01 +00:00
|
|
|
|