glm-5.3-flash
752e36b526
- bast_compile smoke: 543k execs, 10830 edges, coverage still growing at budget end; data_access smoke: 3.5M execs, saturated at 379 edges - both exited 0, empty artifact dirs, oom/timeout/crash 0/0/0 - json.dict: libFuzzer's parser rejects \u escapes and unquoted tails (caught at campaign launch, not by the fuzzer) - plan doc §3/§5/§6/§7 updated with wave-1 results
85 lines
1016 B
Plaintext
85 lines
1016 B
Plaintext
# BAST document tokens for the bast_compile target.
|
|
# libFuzzer dictionary format: each entry is a quoted string (JSON
|
|
# escaping for quotes/backslashes in the emitted bytes).
|
|
#
|
|
# Structure tokens
|
|
"$defs"
|
|
"$ref"
|
|
"kind"
|
|
"name"
|
|
"fields"
|
|
"element"
|
|
"count"
|
|
"values"
|
|
"endian"
|
|
"align"
|
|
"encoding"
|
|
"maxLength"
|
|
"discriminator"
|
|
"mapping"
|
|
"offset"
|
|
"type"
|
|
"struct"
|
|
"union"
|
|
"enum"
|
|
"array"
|
|
"record"
|
|
"string"
|
|
"bytes"
|
|
"bool"
|
|
"int8"
|
|
"int16"
|
|
"int32"
|
|
"int64"
|
|
"uint8"
|
|
"uint16"
|
|
"uint32"
|
|
"uint64"
|
|
"float32"
|
|
"float64"
|
|
"little"
|
|
"big"
|
|
"length-prefixed"
|
|
"offset-indirect"
|
|
"byte"
|
|
"field"
|
|
"uint8_max"
|
|
# JSON punctuation (with common spacing variants)
|
|
"{"
|
|
"}"
|
|
"["
|
|
"]"
|
|
":"
|
|
","
|
|
"{\""
|
|
":{}"
|
|
"{}}]"
|
|
"[]"
|
|
"[["
|
|
"]]"
|
|
"{\"$defs\":{}}"
|
|
"{\"kind\":\"struct\",\"fields\":[]}"
|
|
"\"$ref\":\"#/$defs/"
|
|
"#/$defs/"
|
|
"#/$defs/A"
|
|
"\"kind\":{\"$ref\":\"#/$defs/S\"}"
|
|
"null"
|
|
"true"
|
|
"false"
|
|
"123456"
|
|
"-1"
|
|
"0"
|
|
"4096"
|
|
"4097"
|
|
"67108864"
|
|
"67108865"
|
|
"65536"
|
|
"65537"
|
|
"18446744073709551615"
|
|
"3.5"
|
|
"1e999"
|
|
"\"\""
|
|
# Strings that stress the parser
|
|
"AAAABBBBCCCCDDDD"
|
|
"\x00"
|
|
"\\" |