Function TestPropertyFuzzHarnessesNoCrash

property_test.go:938–989

--------------------------------------------------------------------------- Property: all fuzz harnesses from fuzz.go never panic on arbitrary bytes --------------------------------------------------------------------------- This is the OSS-Fuzz invariant — the harness must accept any byte sequence

(t *testing.T)

// reqproof:proptest FuzzParseString, FuzzEachKey, FuzzDelete, FuzzSet, FuzzObjectEach, FuzzParseFloat, FuzzParseInt, FuzzParseBool, FuzzTokenStart, FuzzGetString, FuzzGetFloat, FuzzGetInt, FuzzGetBoolean, FuzzGetUnsafeString
// Verifies: SYS-REQ-035 [property]
func TestPropertyFuzzHarnessesNoCrash(t *testing.T) {
	r := newRNG(jsonSeed + 14)
	const iterations = 5000
	// Each harness is a function that takes []byte and returns int (0/1).
	// We require: (1) no panic, (2) deterministic return for identical input.
	harnesses := []struct {
		name string
		fn   func([]byte) int
	}{
		{"FuzzParseString", FuzzParseString},
		{"FuzzEachKey", FuzzEachKey},
		{"FuzzDelete", FuzzDelete},
		{"FuzzSet", FuzzSet},
		{"FuzzObjectEach", FuzzObjectEach},
		{"FuzzParseFloat", FuzzParseFloat},
		{"FuzzParseInt", FuzzParseInt},
		{"FuzzParseBool", FuzzParseBool},
		{"FuzzTokenStart", FuzzTokenStart},
		{"FuzzGetString", FuzzGetString},
		{"FuzzGetFloat", FuzzGetFloat},
		{"FuzzGetInt", FuzzGetInt},
		{"FuzzGetBoolean", FuzzGetBoolean},
		{"FuzzGetUnsafeString", FuzzGetUnsafeString},
	}
	// Mix of valid JSON and arbitrary bytes.
	inputs := make([][]byte, 0, iterations)
	for i := 0; i < iterations/2; i++ {
		inputs = append(inputs, randomJSONBytes(r, 2))
	}
	for i := 0; i < iterations/2; i++ {
		inputs = append(inputs, randomBytes(r, 128))
	}
	// Curated edge cases.
	inputs = append(inputs, nil, []byte{}, []byte("\x00"), []byte("\xff"),
		[]byte("{"), []byte("}"), []byte("["), []byte("]"),
		[]byte(`{"test":`), []byte(`{{{`),
		bytes.Repeat([]byte{0x80}, 256),
	)

	for _, h := range harnesses {
		for i, raw := range inputs {
			if !recoverNoPanic(func() { _ = h.fn(raw) }) {
				t.Fatalf("%s panicked on input #%d %q", h.name, i, raw)
			}
			a := safeCall(h.fn, raw)
			b := safeCall(h.fn, raw)
			if a != b {
				t.Fatalf("%s non-deterministic on input #%d %q: %d vs %d", h.name, i, raw, a, b)
			}
		}
	}
}

// safeCall invokes a fuzz harness, recovering from any panic and returning
// the harness result or -1 on panic.