Masterminds · jesse-c · Aug 14, 2019 · Sep 11, 2019
diff --git a/README.md b/README.md
@@ -231,6 +231,14 @@ for _, m := range msgs {
 }
 ```
 
+
+## Fuzzing
+
+ [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) is used for fuzzing.
+
+1. `go-fuzz-build`
+2. `go-fuzz -workdir=fuzz`
+
 ## Contribute
 
 If you find an issue or want to contribute please file an [issue](https://github.com/Masterminds/semver/issues)

diff --git a/fuzz/corpus/0076d25f1b936445877616b3e99770ae3a2c82fa-1 b/fuzz/corpus/0076d25f1b936445877616b3e99770ae3a2c82fa-1
@@ -0,0 +1 @@
+23841857910
diff --git a/fuzz/corpus/049a2599df249a937cd26dfddbc7fb81128821d2-4 b/fuzz/corpus/049a2599df249a937cd26dfddbc7fb81128821d2-4
@@ -0,0 +1 @@
+1.8.
diff --git a/fuzz/corpus/050443c4ccf5f213f21b948337a1d9aa5a2b0d16 b/fuzz/corpus/050443c4ccf5f213f21b948337a1d9aa5a2b0d16
@@ -0,0 +1 @@
+586846078217137.026105665555746235461533351075315326-2.8
diff --git a/fuzz/corpus/0af70e7d388f5eed178533a051db1bf0469b9f55-1 b/fuzz/corpus/0af70e7d388f5eed178533a051db1bf0469b9f55-1
@@ -0,0 +1 @@
+90949470177��82349150390625� �>R
diff --git a/fuzz/corpus/0b37ba698a94f3ab361838a4f8f6f3e181c3af11-7 b/fuzz/corpus/0b37ba698a94f3ab361838a4f8f6f3e181c3af11-7
@@ -0,0 +1 @@
+2-2.1.1.1.1.2.8.2.1.1.1.1.2.8.8.8.8.
diff --git a/fuzz/corpus/0bfbc37548f6926e68197dbbc28226496ab56835-6 b/fuzz/corpus/0bfbc37548f6926e68197dbbc28226496ab56835-6
@@ -0,0 +1 @@
+v5.8.
diff --git a/fuzz/corpus/11c0cbb7b9c289703eeaf92893123eb11d321acc-4 b/fuzz/corpus/11c0cbb7b9c289703eeaf92893123eb11d321acc-4
@@ -0,0 +1 @@
+2-2.1.1.8.8.
diff --git a/fuzz/corpus/158536303a0f43c988f1481e2d8b11c18b7de46a-3 b/fuzz/corpus/158536303a0f43c988f1481e2d8b11c18b7de46a-3
@@ -0,0 +1 @@
+8�
diff --git a/fuzz/corpus/1b049aa92f300c21de0afee0199e93588414f180-1 b/fuzz/corpus/1b049aa92f300c21de0afee0199e93588414f180-1
@@ -0,0 +1 @@
+�
diff --git a/fuzz/corpus/2e25f70c78a90a41ce39299f93108eacf4f14d20 b/fuzz/corpus/2e25f70c78a90a41ce39299f93108eacf4f14d20
@@ -0,0 +1 @@
+2-20x7d9ccCb363E8058b2Cdc6C0ACcEA6.-0x3Cf8FA
diff --git a/fuzz/corpus/358cf0031ab7b2550351e1e327f3c11ebc651564 b/fuzz/corpus/358cf0031ab7b2550351e1e327f3c11ebc651564
@@ -0,0 +1 @@
+07303566401447121004654130440115431
diff --git a/fuzz/corpus/368ca55f0f4c6b77876e8bfadc9f650f1c6d984f-3 b/fuzz/corpus/368ca55f0f4c6b77876e8bfadc9f650f1c6d984f-3
@@ -0,0 +1 @@
+2.8
diff --git a/fuzz/corpus/41f635c43fbfdc756f5ed4d25fd0bc73079a4632-3 b/fuzz/corpus/41f635c43fbfdc756f5ed4d25fd0bc73079a4632-3
diff --git a/fuzz/corpus/44243d6c7292260cb66695a0d96f232caf33bf7f-3 b/fuzz/corpus/44243d6c7292260cb66695a0d96f232caf33bf7f-3
@@ -0,0 +1 @@
+2-84185�n7910darwin7910
diff --git a/fuzz/corpus/4f88a2211cbe5880c8c527579f280dc7fe2e4cff-2 b/fuzz/corpus/4f88a2211cbe5880c8c527579f280dc7fe2e4cff-2
@@ -0,0 +1 @@
+7񴴕
diff --git a/fuzz/corpus/54164dafd7536336be7ef03915d58fc8c9cfbd63-2 b/fuzz/corpus/54164dafd7536336be7ef03915d58fc8c9cfbd63-2
@@ -0,0 +1 @@
+7�
diff --git a/fuzz/corpus/55df2a59ed6a888ee2f0cdfdcc8582696702de7a-2 b/fuzz/corpus/55df2a59ed6a888ee2f0cdfdcc8582696702de7a-2
@@ -0,0 +1 @@
+�
diff --git a/fuzz/corpus/567421d5c86752cac7aca5ec2de3064055f1bd2a-1 b/fuzz/corpus/567421d5c86752cac7aca5ec2de3064055f1bd2a-1
@@ -0,0 +1 @@
+2.82.
diff --git a/fuzz/corpus/57fd5e88f627e4e90a98925d65a83e8fbfc20619-2 b/fuzz/corpus/57fd5e88f627e4e90a98925d65a83e8fbfc20619-2
@@ -0,0 +1 @@
+2-841857910
diff --git a/fuzz/corpus/66b278f70fd85ed13bb77524bbf2e1f4a057e6c6-2 b/fuzz/corpus/66b278f70fd85ed13bb77524bbf2e1f4a057e6c6-2
@@ -0,0 +1 @@
+2.7.3-2.4+1
diff --git a/fuzz/corpus/6ba7d754491d6da6a51848dee528549458b3f2ac-3 b/fuzz/corpus/6ba7d754491d6da6a51848dee528549458b3f2ac-3
@@ -0,0 +1 @@
+7450580596923828125�
diff --git a/fuzz/corpus/73d4d153f06ffb46e7a7b5a991e44c8b44a8a682 b/fuzz/corpus/73d4d153f06ffb46e7a7b5a991e44c8b44a8a682
@@ -0,0 +1 @@
+2.2.8
diff --git a/fuzz/corpus/751e52cf9f9e04980e4a8e3702eb8e550e3152f6-4 b/fuzz/corpus/751e52cf9f9e04980e4a8e3702eb8e550e3152f6-4
@@ -0,0 +1 @@
+2.791079N
diff --git a/fuzz/corpus/7f89733dcecd0bf56589d0573b3c49ecc4a318d0-2 b/fuzz/corpus/7f89733dcecd0bf56589d0573b3c49ecc4a318d0-2
@@ -0,0 +1 @@
+�ӕ�
diff --git a/fuzz/corpus/805d55ad88ba86464a2803de36a1767f6d066cb7-5 b/fuzz/corpus/805d55ad88ba86464a2803de36a1767f6d066cb7-5
@@ -0,0 +1 @@
+2.34694469519536141888694469519536141888238489627837123848962783713486562�
diff --git a/fuzz/corpus/84a76338d174d7b57526d8f086aa8630c4921a48 b/fuzz/corpus/84a76338d174d7b57526d8f086aa8630c4921a48
@@ -0,0 +1 @@
+-0xCbF8D1a42b0Fafd.06547234431626001625527
diff --git a/fuzz/corpus/8865df48fc51d917f1af262a33486e9a7598a428-6 b/fuzz/corpus/8865df48fc51d917f1af262a33486e9a7598a428-6
@@ -0,0 +1 @@
+2-2.1.1.1.1.2.8.8.8.
diff --git a/fuzz/corpus/8e86a0a265e7a07063f61ea413dbd00d9aff5ea0-4 b/fuzz/corpus/8e86a0a265e7a07063f61ea413dbd00d9aff5ea0-4
@@ -0,0 +1 @@
+2-8darwin7910
diff --git a/fuzz/corpus/924c998c3029aebdd91776d6e7e9e4c1426b2e80-1 b/fuzz/corpus/924c998c3029aebdd91776d6e7e9e4c1426b2e80-1
@@ -0,0 +1 @@
+2.7.26105665555746235461
diff --git a/fuzz/corpus/959d7e3e2b9585946ef387a903f67d87531f3911-1 b/fuzz/corpus/959d7e3e2b9585946ef387a903f67d87531f3911-1
@@ -0,0 +1 @@
+2-2.8
diff --git a/fuzz/corpus/985d064cd782b589f034078e180a862f7a56dbf4-3 b/fuzz/corpus/985d064cd782b589f034078e180a862f7a56dbf4-3
@@ -0,0 +1 @@
+7� 
diff --git a/fuzz/corpus/9d80677fd73e7c6b8bec0d3546b44a946136991a-2 b/fuzz/corpus/9d80677fd73e7c6b8bec0d3546b44a946136991a-2
@@ -0,0 +1 @@
+�
diff --git a/fuzz/corpus/a5d418454cd51f9f7529a30cae32bb844b7ae273-3 b/fuzz/corpus/a5d418454cd51f9f7529a30cae32bb844b7ae273-3
@@ -0,0 +1 @@
+ӕ
diff --git a/fuzz/corpus/a8808928ed09aa1a359e726b682c3d3df7f93d9b-2 b/fuzz/corpus/a8808928ed09aa1a359e726b682c3d3df7f93d9b-2
@@ -0,0 +1 @@
+2-2.0.8
diff --git a/fuzz/corpus/a8c58de52487ebf014e626febfa24e2197dfaaa4-3 b/fuzz/corpus/a8c58de52487ebf014e626febfa24e2197dfaaa4-3
@@ -0,0 +1 @@
+2-2.1.8.
diff --git a/fuzz/corpus/b32e0217fd4be7087705a80fd81769082081b733-4 b/fuzz/corpus/b32e0217fd4be7087705a80fd81769082081b733-4
@@ -0,0 +1 @@
+񴴕
diff --git a/fuzz/corpus/b382b3628a15b943b5db9749461f0ec909ff296e-4 b/fuzz/corpus/b382b3628a15b943b5db9749461f0ec909ff296e-4
@@ -0,0 +1 @@
+2.3469446951953614188823848962783713486562�
diff --git a/fuzz/corpus/b609b4411efc9854fc3c2c3dfe0e6d826e0da6dd-2 b/fuzz/corpus/b609b4411efc9854fc3c2c3dfe0e6d826e0da6dd-2
@@ -0,0 +1 @@
+2.8$
diff --git a/fuzz/corpus/b9a7ea2574b5d2bc2da36d2fdcec7282af401de9-5 b/fuzz/corpus/b9a7ea2574b5d2bc2da36d2fdcec7282af401de9-5
@@ -0,0 +1 @@
+2-2.1.1.1.1.8.8.
diff --git a/fuzz/corpus/ba9d10aef160b81bea92b7797eb2f4bc76e6e1c2-4 b/fuzz/corpus/ba9d10aef160b81bea92b7797eb2f4bc76e6e1c2-4
@@ -0,0 +1 @@
+2-2.8.1.8.
diff --git a/fuzz/corpus/bf8b4530d8d246dd74ac53a13471bba17941dff7-1 b/fuzz/corpus/bf8b4530d8d246dd74ac53a13471bba17941dff7-1
@@ -0,0 +1 @@
+
diff --git a/fuzz/corpus/c78dfbf8fc945dc92b021bbba3d0f147a4c7a463-8 b/fuzz/corpus/c78dfbf8fc945dc92b021bbba3d0f147a4c7a463-8
@@ -0,0 +1 @@
+2-2.1.1.1.2.8.2.1.1.1.1.2.8.8.8.8.1.1.1.2.8.2.1.1.1.1.2.8.8.8.8.
diff --git a/fuzz/corpus/ce32a21d54b1c4a7a708a8ea7a1fb9004fe01f61-9 b/fuzz/corpus/ce32a21d54b1c4a7a708a8ea7a1fb9004fe01f61-9
@@ -0,0 +1 @@
+2-2.1.1.1.2.8.2.1.1.1.1.2.8.8.8.8.0.1.1.1.2.8.2.1.1.1.1.2.8.8.8.8.
diff --git a/fuzz/corpus/d023f20b7b42599eeca848ad800a75cd4abe095c b/fuzz/corpus/d023f20b7b42599eeca848ad800a75cd4abe095c
@@ -0,0 +1 @@
+2-07037227326026055322246224140126232e-0x99D
diff --git a/fuzz/corpus/d23f1af9d36a02603fbc81322d426b6d168eb1ee-5 b/fuzz/corpus/d23f1af9d36a02603fbc81322d426b6d168eb1ee-5
@@ -0,0 +1 @@
+2-2.8.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_
diff --git a/fuzz/corpus/d2be6088601161bfd914bbe14e7390ba5877f191-3 b/fuzz/corpus/d2be6088601161bfd914bbe14e7390ba5877f191-3
@@ -0,0 +1 @@
+�
diff --git a/fuzz/corpus/d3fe83b8d87ccda2bbca5e81ce3ab1a1400bfbe8-2 b/fuzz/corpus/d3fe83b8d87ccda2bbca5e81ce3ab1a1400bfbe8-2
@@ -0,0 +1 @@
+�
diff --git a/fuzz/corpus/da39a3ee5e6b4b0d3255bfef95601890afd80709 b/fuzz/corpus/da39a3ee5e6b4b0d3255bfef95601890afd80709
diff --git a/fuzz/corpus/e2651d9b73b3beb71e2d829df8962c73805b47b6-2 b/fuzz/corpus/e2651d9b73b3beb71e2d829df8962c73805b47b6-2
@@ -0,0 +1 @@
+238�1
diff --git a/fuzz/corpus/e3936dc4bcd2e037580a3c3d5d8e9c95aecc7425-3 b/fuzz/corpus/e3936dc4bcd2e037580a3c3d5d8e9c95aecc7425-3
@@ -0,0 +1 @@
+76141834259033203125
diff --git a/fuzz/corpus/e7c6f9118ca6826143c54289edb1d33ff46ea918-3 b/fuzz/corpus/e7c6f9118ca6826143c54289edb1d33ff46ea918-3
@@ -0,0 +1 @@
+2-84185841857917910
diff --git a/fuzz/corpus/ed073034e9a62a3a0f989215188e4705efa874b4-3 b/fuzz/corpus/ed073034e9a62a3a0f989215188e4705efa874b4-3
@@ -0,0 +1 @@
+8Т
diff --git a/fuzz/corpus/ed2b711393d0ea190cff9c5c86fb3eef541feac0-1 b/fuzz/corpus/ed2b711393d0ea190cff9c5c86fb3eef541feac0-1
@@ -0,0 +1 @@
+72888178419700125232338905334472656256105665555746235461533351075315326
diff --git a/fuzz/corpus/efd1f01e1e2a3c37049452eb3a00592f6c503de0-4 b/fuzz/corpus/efd1f01e1e2a3c37049452eb3a00592f6c503de0-4
@@ -0,0 +1 @@
+2.79180596923828125�
diff --git a/fuzz/corpus/efd80197e6ed2f22fd0aac91d5f4503d84bcf4f5-2 b/fuzz/corpus/efd80197e6ed2f22fd0aac91d5f4503d84bcf4f5-2
@@ -0,0 +1 @@
+4�
diff --git a/fuzz/corpus/fa645c4f32ce36fa68d62cb3075027227c0165f1-1 b/fuzz/corpus/fa645c4f32ce36fa68d62cb3075027227c0165f1-1
@@ -0,0 +1 @@
+14901161193847�ӕ
diff --git a/version_fuzz.go b/version_fuzz.go
@@ -0,0 +1,10 @@
+// +build gofuzz
+
+package semver
+
+func Fuzz(data []byte) int {
+	if _, err := NewVersion(string(data)); err != nil {
+		return 0
+	}
+	return 1
+}