Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parser Fuzz Errors #3320

Closed
Boshen opened this issue May 17, 2024 · 0 comments
Closed

Parser Fuzz Errors #3320

Boshen opened this issue May 17, 2024 · 0 comments
Assignees
Labels
C-bug Category - Bug

Comments

@Boshen
Copy link
Member

Boshen commented May 17, 2024

We are getting popular, and I'm anxious about our parser crashing or hanging so people could DOS (denial of service) the services that use oxc.

We have a fuzzer setup in https://github.com/oxc-project/oxc/tree/main/fuzz

It currently reports a "timeout" (it could still complete) on parsing a rewind

m< $<{3[   $<{3[  $<{3[ m< m$<{3[ m< mm< $<{3[   $<{3[  $<{3[ m< m$<{3[ m< m$<{3[  $<{3[ m< m$<{3[ m< $<{3[  $<{3[ m< m$<{3[ m< [

Apparently it rewinds on every $< causing O(N^n) time complexity.

Deciphering the cause and finding the fix is going to be very difficult 😅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C-bug Category - Bug
Projects
None yet
Development

No branches or pull requests

1 participant