blob: 9f6c465d7d9e78edb2ebe60f9817f158aa3cd830 [file] [log] [blame] [view]
---
title: Fuzzing trophy case
---
This page collects issues that have been discovered using [Go's native fuzzing](https://github.com/golang/go/issues/44551).
## Contributing
If native fuzzing uncovered a bug in your project, please consider adding it to this list by editing this Wiki page directly, or by reaching out to katie@golang.org with the bug you'd like to share.
_Note: If you think the bug is a security issue, please report it responsibly to the respective team, and do not include it in this list until public disclosure._
## Trophies
<!-- If editing this list, please maintain alphabetical order -->
### Standard Library
* [go/scanner: inconsistent handling of NUL bytes in 1.17](https://github.com/golang/go/issues/46855)
* [time: ParseDuration can panic on invalid input](https://github.com/golang/go/issues/46883)
### Other projects
* [go-yaml/yaml/v3: yaml.Unmarshal() crashes on "#\n - - QI\xd7"](https://github.com/go-yaml/yaml/issues/744)
* [josephburnett/jd: crashes when validating JSON Patch test/replace operation](https://github.com/josephburnett/jd/commit/7064efc5df7c899ffc53b45be8915e3f4edc1684)
* [josephburnett/jd: JSON Patch to void failing round-trip](https://github.com/josephburnett/jd/commit/bd2fc2657f56c7c1f70a5971c18be32365afd1c7)
* [kokes/smda: nil pointer error](https://github.com/kokes/smda/commit/b41ac00b5f5acba60d93076347fc73fe2fbca340)
* [kokes/smda: out of bounds error](https://github.com/kokes/smda/commit/2c2548f211a1ed2c3547407e0b420e4340612278)
* [mvdan.cc/sh: syntax.Quote failed to quote the empty string](https://github.com/mvdan/sh/commit/92eab20da20af9c4005294abf937e387d87c8407)
* [mvdan.cc/sh: syntax.Quote misused `\x` escape sequences in mksh](https://github.com/mvdan/sh/commit/8bd780f971469bece51617a53da0e1c700c4a5b8)
* [mvdan.cc/sh: syntax.Quote can't quote the `0xFFFE` and `0xFFFF` runes in mksh](https://github.com/mvdan/sh/commit/6ff55fb976f3c39d1a382ff5af616c3665c7e501)
* [pelletier/go-toml: index out of range error in expect function](https://github.com/pelletier/go-toml/issues/561)
* [swaggest/form: panic on invalid keys in request](https://github.com/swaggest/form/issues/4)
* [yuin/goldmark: corner case errors](https://github.com/yuin/goldmark/issues/245)
* [DataDog/datadog-agent: fix edge case in tags normalization](https://github.com/DataDog/datadog-agent/pull/13235)