zxcvbn-go/fuzz/fuzz.go

package fuzz

import (
	"github.com/nbutton23/zxcvbn-go"
)

// Fuzz is used to run https://github.com/dvyukov/go-fuzz
func Fuzz(data []byte) int {
	password := string(data)

	_ = zxcvbn.PasswordStrength(password, nil)
	return 1
}
Add fuzzing and fix crashers. The output of strings.ToLower can have less bytes than the input. There are valid utf8 strings which demonstrate this which could be entered as potential passwords which would cause an out of bounds slice access in the dictionary match code. Fixed issue in go 1.10 test code for adjcmatrix.go to make sure the tests passed cleanly. 2018-03-28 13:42:36 +01:00			`package fuzz`

			`import (`
			`"github.com/nbutton23/zxcvbn-go"`
			`)`

Add comment for fuzz 2018-08-30 15:05:50 -06:00			`// Fuzz is used to run https://github.com/dvyukov/go-fuzz`
Add fuzzing and fix crashers. The output of strings.ToLower can have less bytes than the input. There are valid utf8 strings which demonstrate this which could be entered as potential passwords which would cause an out of bounds slice access in the dictionary match code. Fixed issue in go 1.10 test code for adjcmatrix.go to make sure the tests passed cleanly. 2018-03-28 13:42:36 +01:00			`func Fuzz(data []byte) int {`
			`password := string(data)`

			`_ = zxcvbn.PasswordStrength(password, nil)`
			`return 1`
			`}`