Skip to content

Fuzz yaml.Unmarshal #466

@mx-psi

Description

@mx-psi

Is your feature request related to a problem? Please describe.

On issues like #439, #373 and #191 we can see this library has some panics on invalid data. I would like the library to never panic during unmarshaling and instead return an error.

Describe the solution you'd like

Fix existing panics (that can be tracked in their respective issues), add Go fuzzing targets for yaml.Unmarshal that tries to find instances where the library panics.

Describe alternatives you've considered

None really, I don't think this library is usable for certain use cases unless it can safely handle arbitrary data.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions