This commit is contained in:
shankar0123
2026-05-05 18:18:29 +00:00
parent 7c5cc57d75
commit 75097909e9
71 changed files with 95 additions and 771 deletions
+1 -1
View File
@@ -6,7 +6,7 @@ import "testing"
//
// SCEP RFC 8894 + Intune master bundle Phase 2.5: every parser certctl
// adds gets a Fuzz target in the same package (the fuzz-target-ownership
// rule from cowork/CLAUDE.md::Operating Rules). The point isn't to find
// per the project's operating rules). The point isn't to find
// vulnerabilities (the parser uses stdlib encoding/asn1 which is itself
// fuzzed upstream) — it's to prove that arbitrary attacker-controlled
// bytes cannot panic the SCEP server. Any panic = an availability bug.