Both 10-minute detached campaigns (§5 budget) ran to completion:
sse_parser 18.9k execs / 1100 edges (still discovering at budget end),
ws_chunk_framing 4.8M execs / 245 edges (saturated) — zero crashes,
hangs, OOMs, or leaks on all fork jobs; artifact dirs empty.
One policy gap the first campaigns exposed: the grown corpus entries
(hash-named files in fuzz/corpus/<target>/) leaked as git noise under
the un-ignored corpus dirs. The hash-pattern gitignore now separates
the committed seed-* files from campaign output, per the quinn/h2
model.
docs/plans/fuzzing.md: §3 table marks targets 1-2 implemented; §5
gains the grow-corpus policy + campaign results; §6 sequencing marks
step 1 done. FWD-20 already carried the fix log from 5971c0a.
Verification: corpus replay 80/80 green, cargo test 441 passed, fmt
--check clean.
13 lines
325 B
Plaintext
13 lines
325 B
Plaintext
target/
|
|
node_modules/
|
|
.worktrees/
|
|
|
|
fuzz/target/
|
|
fuzz/artifacts/
|
|
fuzz/coverage/
|
|
# Grown corpora: the hash-named files the campaigns drop into
|
|
# fuzz/corpus/<target>/ are gitignored (the quinn/h2 policy); the
|
|
# committed seeds are the seed-* files, kept via the per-dir
|
|
# .gitignore un-ignores.
|
|
fuzz/corpus/*/[0-9a-f][0-9a-f]*
|