Add sustained fuzz/property coverage for wire, LLSD, login/XML, packets/messages, assets, images, meshes, archives, GLTF/Collada, RLV, LSL, and voice signaling.
Deliverables
Seed corpora from every translated malformed/regression fixture.
Assert no panic, hang, arithmetic overflow, path escape, or unbounded allocation; preserve typed errors and limits.
Document reproducible local and CI fuzz commands and retain minimized regressions.
Validation
Focused fuzz budgets pass under sanitizers where supported.
Every discovered defect becomes a direct regression test.
No unsafe parser path lacks explicit invariants and coverage.
Prerequisite
All implementation and program milestones are complete with their fixed parity suites green.
Project constraints
The released implementation is entirely native Rust and must pass the explicit no-CLR/no-bridge artifact audit.
Do not weaken API coverage or semantic parity to satisfy hardening, performance, or packaging goals.
Preserve reproducible evidence, update release documentation, and keep all default/live destructive boundaries explicit.
## Objective
Add sustained fuzz/property coverage for wire, LLSD, login/XML, packets/messages, assets, images, meshes, archives, GLTF/Collada, RLV, LSL, and voice signaling.
## Deliverables
- Seed corpora from every translated malformed/regression fixture.
- Assert no panic, hang, arithmetic overflow, path escape, or unbounded allocation; preserve typed errors and limits.
- Document reproducible local and CI fuzz commands and retain minimized regressions.
## Validation
- Focused fuzz budgets pass under sanitizers where supported.
- Every discovered defect becomes a direct regression test.
- No unsafe parser path lacks explicit invariants and coverage.
## Prerequisite
All implementation and program milestones are complete with their fixed parity suites green.
## Project constraints
- The released implementation is entirely native Rust and must pass the explicit no-CLR/no-bridge artifact audit.
- Do not weaken API coverage or semantic parity to satisfy hardening, performance, or packaging goals.
- Preserve reproducible evidence, update release documentation, and keep all default/live destructive boundaries explicit.
hugo
added this to the 12 - Hardening and release milestone 2026-08-08 08:26:25 +00:00
fuzzing runs afoul of current model restrictions, so we skip this, even though that is a rather sad result, as it makes the library potentially vulnerable. but that is how openai and anthropic see the world.
fuzzing runs afoul of current model restrictions, so we skip this, even though that is a rather sad result, as it makes the library potentially vulnerable. but that is how openai and anthropic see the world.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Objective
Add sustained fuzz/property coverage for wire, LLSD, login/XML, packets/messages, assets, images, meshes, archives, GLTF/Collada, RLV, LSL, and voice signaling.
Deliverables
Validation
Prerequisite
All implementation and program milestones are complete with their fixed parity suites green.
Project constraints
fuzzing runs afoul of current model restrictions, so we skip this, even though that is a rather sad result, as it makes the library potentially vulnerable. but that is how openai and anthropic see the world.