Dave Kempe a2bbce73ee Add guacd parser fuzz harness and document fuzzing findings ...

libFuzzer+ASan+UBSan harness for guac_parser_append() — the C state
machine that parses all Guacamole wire-format input in guacd. 3.2M
iterations found no memory corruption; one non-exploitable signed
integer overflow (UBSan) in the length prefix accumulator noted in
FINDINGS.md.

Also adds FINDINGS.md for the Rust protocol parser fuzzer documenting
the UTF-8 boundary panic fix from v0.1.3.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-07 14:17:42 +11:00

..

guacamole

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00

.gitignore

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00

build.sh

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00

config.h

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00

FINDINGS.md

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00

fuzz_parser.c

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00