alkcall

82 Commits 1 Branch 12 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
glm-5.3-flash	80a37e94ab	feat(fuzz): cargo-fuzz workspace, chunk_header + envelope_frame targets (fuzzing.md step 1) - fuzz/ workspace (nightly-pinned via rust-toolchain.toml, excluded from the main workspace and the published package): chunk_header and envelope_frame targets per fuzzing.md \u00a77.1 - invariant logic in fuzz/shared (stable-toolchain crate): committed corpus replay as plain cargo test (quinn CI pattern, \u00a77.2 tier 3) - envelope target adds FrameError shape-partition asserts, exact consumption accounting, structural write_frame round-trip, serde key-contract, and a trailing-byte probe (prefix counts body only) - chunk_header target adds round-trip identity, TooLarge/short error shape, is_eof, 8-byte consumption, input-never-mutated - committed seed corpora: 245 deterministic seeds via fuzz/gen_fuzz_seeds.py (truncations, len=0/MAX+1/u32::MAX, channel 0, invalid UTF-8, deep nesting); grown corpora + artifacts gitignored - fuzz/run-detached.sh: \u00a77.6 detached runner (setsid+nohup+log, fork mode, rss/malloc limits) \u2014 campaigns never share fate with a session - fuzz/json.dict; README; research doc \u00a77.7 records step-1 status Verification: cargo fuzz build clean; stable side green (cargo test 682 passed, clippy -D warnings, fmt --check incl. fuzz/shared); corpus replay 245 seeds green; detached 10-min campaigns on both targets completed with zero crashes/OOMs/timeouts	2026-09-27 21:14:35 +00:00
glm-5.3-flash	7ae0315f19	docs(research): fuzzing must not share fate with agent sessions (detached runner) - OOM in a fuzz target must cost the fuzzer, never the opencode host - three defense layers: soft rss/malloc limits, fork-mode blast radius, setsid+nohup detachment with log-file polling (fuzz/run-detached.sh) - no ulimit -v with ASAN; corpus replay + CI flag parity notes - sequencing and summary updated to make the detached runner mandatory	2026-09-27 20:13:35 +00:00
glm-5.3-flash	791eea7298	docs(research): fuzzing evaluation — adopt cargo-fuzz, five targets, two-tier CI - web survey of 2025/2026 Rust fuzzing tooling (cargo-fuzz/afl/bolero/libafl) - practice survey: rustls, quinn, quiche, h2, prost, s2n-quic, yamux/libp2p - parse-surface inventory of this crate (both wire formats, dispatch, manager) - pre-fuzz code-review findings: unbounded early-arrival key-space (manager.rs early_arrivals), unbounded spawned-JoinHandle growth (dispatch.rs), 64 MiB pre-payload allocation window, O(n^2) abort cascade - recommendation: cargo-fuzz + arbitrary, 5 targets (chunk_header, envelope_frame, manager_routing, envelope_semantic, spec_parse), committed seeds only, 10s/target smoke CI, OSS-Fuzz after stabilization	2026-09-27 20:01:29 +00:00

Author

SHA1

Message

Date

glm-5.3-flash

80a37e94ab

feat(fuzz): cargo-fuzz workspace, chunk_header + envelope_frame targets (fuzzing.md step 1)

- fuzz/ workspace (nightly-pinned via rust-toolchain.toml, excluded from
  the main workspace and the published package): chunk_header and
  envelope_frame targets per fuzzing.md \u00a77.1
- invariant logic in fuzz/shared (stable-toolchain crate): committed
  corpus replay as plain cargo test (quinn CI pattern, \u00a77.2 tier 3)
- envelope target adds FrameError shape-partition asserts, exact
  consumption accounting, structural write_frame round-trip, serde
  key-contract, and a trailing-byte probe (prefix counts body only)
- chunk_header target adds round-trip identity, TooLarge/short error
  shape, is_eof, 8-byte consumption, input-never-mutated
- committed seed corpora: 245 deterministic seeds via
  fuzz/gen_fuzz_seeds.py (truncations, len=0/MAX+1/u32::MAX, channel 0,
  invalid UTF-8, deep nesting); grown corpora + artifacts gitignored
- fuzz/run-detached.sh: \u00a77.6 detached runner (setsid+nohup+log, fork
  mode, rss/malloc limits) \u2014 campaigns never share fate with a session
- fuzz/json.dict; README; research doc \u00a77.7 records step-1 status

Verification: cargo fuzz build clean; stable side green (cargo test 682
passed, clippy -D warnings, fmt --check incl. fuzz/shared); corpus
replay 245 seeds green; detached 10-min campaigns on both targets
completed with zero crashes/OOMs/timeouts

2026-09-27 21:14:35 +00:00

glm-5.3-flash

7ae0315f19

docs(research): fuzzing must not share fate with agent sessions (detached runner)

- OOM in a fuzz target must cost the fuzzer, never the opencode host
- three defense layers: soft rss/malloc limits, fork-mode blast radius,
  setsid+nohup detachment with log-file polling (fuzz/run-detached.sh)
- no ulimit -v with ASAN; corpus replay + CI flag parity notes
- sequencing and summary updated to make the detached runner mandatory

2026-09-27 20:13:35 +00:00

glm-5.3-flash

791eea7298

docs(research): fuzzing evaluation — adopt cargo-fuzz, five targets, two-tier CI

- web survey of 2025/2026 Rust fuzzing tooling (cargo-fuzz/afl/bolero/libafl)
- practice survey: rustls, quinn, quiche, h2, prost, s2n-quic, yamux/libp2p
- parse-surface inventory of this crate (both wire formats, dispatch, manager)
- pre-fuzz code-review findings: unbounded early-arrival key-space
  (manager.rs early_arrivals), unbounded spawned-JoinHandle growth
  (dispatch.rs), 64 MiB pre-payload allocation window, O(n^2) abort cascade
- recommendation: cargo-fuzz + arbitrary, 5 targets (chunk_header,
  envelope_frame, manager_routing, envelope_semantic, spec_parse),
  committed seeds only, 10s/target smoke CI, OSS-Fuzz after stabilization

2026-09-27 20:01:29 +00:00