You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you discover a potential security issue in s2n we ask that you notify
AWS Security via our vulnerability reporting page. Please do not create a public github issue.
Problem:
Currently, it is very difficult to tell what the root cause is when fuzz tests fail due to incorrect LD_PRELOAD setup. For example, s2n_memory_leak_negative_test fails with the following message when overriding functions are not correctly linked to libs2n:
This makes debugging much harder. There should be an obvious indication when function overrides are not linked properly.
Solution:
Write a new fuzz test whose only role is to check function overrides are linked properly. This test should pass if functions are overridden correctly, and fail with a clear message to indicate something is wrong with function overrides, if not overridden correctly.
Requirements / Acceptance Criteria:
Test duration should be minimal to avoid increasing too much overhead for fuzz tests
The text was updated successfully, but these errors were encountered:
lrstewart
changed the title
add a new fuzz test to check for correct function overrides
Detect LD_PRELOAD failures in fuzz tests
Dec 5, 2024
Security issue notifications
If you discover a potential security issue in s2n we ask that you notify
AWS Security via our vulnerability reporting page. Please do not create a public github issue.
Problem:
Currently, it is very difficult to tell what the root cause is when fuzz tests fail due to incorrect LD_PRELOAD setup. For example, s2n_memory_leak_negative_test fails with the following message when overriding functions are not correctly linked to libs2n:
This makes debugging much harder. There should be an obvious indication when function overrides are not linked properly.
Solution:
Write a new fuzz test whose only role is to check function overrides are linked properly. This test should pass if functions are overridden correctly, and fail with a clear message to indicate something is wrong with function overrides, if not overridden correctly.
Requirements / Acceptance Criteria:
Test duration should be minimal to avoid increasing too much overhead for fuzz tests
The text was updated successfully, but these errors were encountered: