fuzz: new parser findings 2026-06-19 - #1232
Merged
Merged
Conversation
keithamus
force-pushed
the
fuzz/findings-20260619-094509
branch
from
June 29, 2026 16:32
4bf3c5b to
86d52e4
Compare
✅ CI passed
|
github-actions Bot
pushed a commit
that referenced
this pull request
Jun 29, 2026
## [0.0.27] - 2026-06-29 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
Merged
github-actions Bot
pushed a commit
that referenced
this pull request
Jun 29, 2026
## [0.0.27] - 2026-06-29 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
github-actions Bot
pushed a commit
that referenced
this pull request
Jun 29, 2026
## [0.0.27] - 2026-06-29 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
github-actions Bot
pushed a commit
that referenced
this pull request
Jun 29, 2026
## [0.0.27] - 2026-06-29 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 3, 2026
## [0.0.27] - 2026-07-03 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 3, 2026
## [0.0.27] - 2026-07-03 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 3, 2026
## [0.0.27] - 2026-07-03 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 3, 2026
## [0.0.27] - 2026-07-03 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_derives - chore(deps): update rust crate itertools to 0.15.0 (#1246) ([#1246](#1246)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_derives - chore(deps): update rust crate itertools to 0.15.0 (#1246) ([#1246](#1246)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) - Implement "VisitFlow" (#1263) ([#1263](#1263)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_derives - chore(deps): update rust crate itertools to 0.15.0 (#1246) ([#1246](#1246)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255)) [forcebuild]
github-actions Bot
pushed a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) - Implement "VisitFlow" (#1263) ([#1263](#1263)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_derives - chore(deps): update rust crate itertools to 0.15.0 (#1246) ([#1246](#1246)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
keithamus
added a commit
that referenced
this pull request
Jul 4, 2026
## [0.0.27] - 2026-07-04 ### Other Changes - Fuzz: minimize corpus, and do so on nightly fuzz build (#1257) ([#1257](#1257)) - CI: Ensure benches build (#1259) ([#1259](#1259)) ### Css_ast - css_ast/css_parse: Improve peeking robustness. (#1238) ([#1238](#1238)) - Regenerate css_ast/src/values from csswg drafts (#1242) ([#1242](#1242)) - Regenerate css_ast/src/values from csswg drafts (#1254) ([#1254](#1254)) - fuzz: new parser findings 2026-06-19 (#1232) ([#1232](#1232)) - css_ast: Refactor assert_specificity to use closure pattern (#1261) ([#1261](#1261)) - css_ast: derive(ToSpan) on WebkitFunctionalPseudoClass (#1262) ([#1262](#1262)) - Implement "VisitFlow" (#1263) ([#1263](#1263)) ### Css_parse - fuzz: new parser findings 2026-07-01 (#1260) ([#1260](#1260)) ### Csskit - chore(deps): update dependencies (patch) (#1243) ([#1243](#1243)) ### Csskit_derives - chore(deps): update rust crate itertools to 0.15.0 (#1246) ([#1246](#1246)) ### Csskit_vscode - chore(deps): update dependencies to v1.68.0 (#1247) ([#1247](#1247)) - fix(deps): update dependencies (patch) (#1255) ([#1255](#1255))
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Nightly fuzz run found new findings.
A few callsites around bad declaration parsing
peek_n(0). This is wrong, as peek should always be 1-(BUFFER_LEN).This change adds a
debug_assert!inpeek_nto ensure that, and refactors the two bad callsites to usepeek_n(1).Findings
minimized-from-fe4b03d8f4a3fc78ef44acce2c1f31fd63b0fd3f(16 bytes)minimized-from-968d309dbb4f16c30b73e6fe983231a64b1856c4(650 bytes)minimized-from-068fda2a97a4eab9334f7bbe6c636147441c18b2(24 bytes)minimized-from-271a3cbd71777d9fc4971f75c0787344f755142e(78 bytes)minimized-from-9ac286f5fa54b7ba8b8ba17c2107ca3d2ee9f013(312 bytes)minimized-from-05b90ec2074f2a2e096c670a5db4aee3fac09240(11 bytes){--:r( ;6)}minimized-from-1610361b7aab0349eee3287d1d2c5449e75d4b96(271 bytes)minimized-from-4aa06402f8166fc90299e01bc13ae7e26fe720d5(274 bytes)minimized-from-77d07c31a8bb4fc28131c8e4405b27c5032b1476(137 bytes)minimized-from-61e9d6525bb4fe474e546c875c156b1db9dd7fdb(41 bytes)minimized-from-f3d4de0383d08d3ae0851e417961445813acbfa4(331 bytes)minimized-from-41b748fc70e40e288e731651c5dc6e25f7a3bf25(1714 bytes)minimized-from-93eb33477b775b6474b815f373bd2d0a94c6d882(14 bytes)minimized-from-4b72fd1eb59d677f102bf4698caf29db94766333(10 bytes){--:r( ;)}minimized-from-6f71f1e286e5902d81e6490348016b334c11e7c1(106 bytes)minimized-from-b70596a96c92251fb0bdeeccc4a33156fadd0a48(211 bytes)minimized-from-63876198646c84c0d23edeac25d61bb371416387(1256 bytes)minimized-from-f1407909967ad71bcdea2cb9cc9bcb0f6b58b01d(60 bytes)minimized-from-b1f270fc5d2ec612896b4106f4cada2aee8fb42b(218 bytes)minimized-from-45e192478082ea506002d950c6588e489f8a5a18(9 bytes){--:r(;)}minimized-from-287a611680526c4a2fa7e33d51580cc3f9ce2a69(195 bytes)minimized-from-516f5c7cfe19d60ded73858e6485fbf7148621cc(54 bytes)minimized-from-76cca9269d4ac12d9b9fa97d44a8fc7df59b2217(43 bytes)minimized-from-223ee5a5f15dbb910e466da2594de8fda634c197(1622 bytes)minimized-from-02fb3cd8b6a7db7ffe847e64566c70bed069e958(15 bytes)minimized-from-fd6e5417a218c3be1bdf0f471fb631bce1b555be(146 bytes)minimized-from-51291e0e9ade60b12e698ce6853a5e87ffa9d3e8(329 bytes)minimized-from-f4f4b690029f7f1c9a3fca2aee62ec9a3fe19b79(42 bytes)minimized-from-da7c304d1d4d46742e60eb1f07677cd0166cf745(2020 bytes)minimized-from-9120548f8085c0a6c59a50e2d8ece5fac7abcd55(884 bytes)minimized-from-6475074a5831bceaa8f13289c3812c93bf007940(62 bytes)minimized-from-3ef7c57af6f50bf1e147088ecd8e4d2e851c9a4f(40 bytes)minimized-from-a8e7a90c562d460035c82822f7cc9f33f0ca2f7a(1258 bytes)minimized-from-13373a83c3e20485630083acdae4476aa444a240(36 bytes)minimized-from-0c4d46ec7f47c0043504ce09db05315a51f97424(33 bytes)minimized-from-cb2b1081207ae952acb879b1f8c3e380a24b53f1(35 bytes)minimized-from-040c771e52ad17468fb1a0486ecd1c2832d765b5(117 bytes)minimized-from-57c5ba8da4caf2bc6ae8d29672a51fe1cdc080de(535 bytes)minimized-from-d9f77f6aa341ebd32e6495f6e71a0162d7718153(82 bytes)minimized-from-d6babab74890757e1bc89dc0a020221def322cf0(27 bytes)minimized-from-3b6a7296b6354baa6c26a10f33052d5b9677cb40(241 bytes)minimized-from-623f89365da618e974ce6cb54eac59f76aa0ea0b(898 bytes)minimized-from-9afe24c0552a3cae60c1eb70704daf9f45171246(2363 bytes)minimized-from-4ec0cf15866fede37147fb8aae17c153de0be772(156 bytes)minimized-from-15789bd27cbdf80a04251d068fd522f05d377a92(21 bytes)minimized-from-c5742f8e5c3f3f131cda093e01cec1bffd0e7c74(262 bytes)