Add an afl fuzz target

Makefile

@@ -42,4 +42,9 @@ lint:
 	@rustup component add clippy 2> /dev/null
 	cargo clippy --all-features --all --tests --examples -- -D clippy::all
 
-.PHONY: build test bench docs upload-docs style-check lint
+fuzz:
+	cd afl/parser/ && \
+	cargo afl build --bin fuzz-target && \
+	cargo afl fuzz -i in -o out target/debug/fuzz-target
+
+.PHONY: build test bench docs upload-docs style-check lint fuzz

README.md

@@ -67,3 +67,13 @@ To run benchmarks:
 To build the docs:
 
     $ make docs
+
+To run fuzz tests with afl, first install cargo-afl (`cargo install -f afl`),
+then run:
+
+    $ make fuzz
+
+If the fuzzer finds a crash, in order to reproduce it, run:
+
+    $ cd afl/<target>/
+    $ cargo run --bin reproduce -- out/crashes/<crashfile>

afl/.gitignore

@@ -0,0 +1,2 @@
+out/
+core.*

afl/parser/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "fuzz-target-parser"
+version = "0.1.0"
+authors = ["redis-rs developers"]
+edition = "2018"
+
+[[bin]]
+name = "fuzz-target"
+path = "src/main.rs"
+
+[[bin]]
+name = "reproduce"
+path = "src/reproduce.rs"
+
+[dependencies]
+afl = "0.4"
+redis = { path = "../../" }

afl/parser/in/array

@@ -0,0 +1,5 @@
+*3
+:1
+$-1
+$2
+hi

afl/parser/in/array-null

@@ -0,0 +1 @@
+*-1

afl/parser/in/bulkstring

@@ -0,0 +1,2 @@
+$6
+foobar

afl/parser/in/bulkstring-null

@@ -0,0 +1 @@
+$-1

afl/parser/in/error

@@ -0,0 +1 @@
+-ERR unknown command

afl/parser/in/integer

@@ -0,0 +1 @@
+:1337

afl/parser/in/invalid-string

@@ -0,0 +1,2 @@
+$6
+foo

afl/parser/in/string

@@ -0,0 +1 @@
++OK

afl/parser/src/main.rs

@@ -0,0 +1,9 @@
+use afl::fuzz;
+
+use redis::parse_redis_value;
+
+fn main() {
+    fuzz!(|data: &[u8]| {
+        let _ = parse_redis_value(data);
+    });
+}

afl/parser/src/reproduce.rs

@@ -0,0 +1,13 @@
+use redis::parse_redis_value;
+
+fn main() {
+    let args: Vec<String> = std::env::args().collect();
+    if args.len() != 2 {
+        println!("Usage: {} <path-to-crash>", args[0]);
+        std::process::exit(1);
+    }
+
+    let data = std::fs::read(&args[1]).expect(&format!("Could not open file {}", args[1]));
+    let v = parse_redis_value(&data);
+    println!("Result: {:?}", v);
+}