Skip to content

atheris: Add version 3.1.0 - #2562

Merged
luhenry merged 2 commits into
mainfrom
atheris
Oct 1, 2026
Merged

luhenry merged 2 commits into
mainfrom
atheris

Conversation

@luhenry

@luhenry luhenry commented Sep 30, 2026 •

Copy link
Copy Markdown
Member

Google's Python fuzzing engine, built on libFuzzer via a pybind11 extension.

Mirrors upstream's deployment/Dockerfile and run_tests.sh, pinned to the 352d5f2 release commit (its Python sources are byte-identical to the 3.1.0 PyPI wheels; upstream cuts releases without git tags).

Differs from upstream

  • Upstream builds libFuzzer from a pinned LLVM 16 snapshot that predates riscv64 libFuzzer support (added in LLVM 17: ALL_FUZZER_SUPPORTED_ARCH in compiler-rt/cmake/Modules/AllSupportedArchDefs.cmake). Rocky 10's compiler-rt RPM already ships a prebuilt libclang_rt.fuzzer_no_main.a for riscv64, so CIBW_BEFORE_ALL: dnf install -y compiler-rt plus LIBFUZZER_LIB replaces the multi-hour LLVM build entirely. New gotcha 623 in skills/python-project-porting/references/gotchas/feasibility-and-triage.md covers this.

Matrix: cp312/cp313/cp314 - no free-threaded wheel upstream, no musllinux (matches upstream).

Testing: upstream's own src/*_test.py scripts, run directly against the installed wheel.

License: OK (Apache-2.0)

@github-actions

github-actions Bot commented Sep 30, 2026 •

Copy link
Copy Markdown
Contributor
PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-10-01 11:44 UTC

All 25 InstrumentBytecodeTest cases pass on cp313/cp314; the only failure
is pyinstaller_coverage_test.py, and it fails before atheris is even
involved: PyInstaller's onefile mode needs a shared libpython, and this
manylinux image's cp312/cp313/cp314 builds don't have one ("Python was
built without a shared library"). That's a property of the interpreter
build, not something a patch to atheris or its packaging can fix, and
it's unrelated to the fuzzing engine's own correctness.
@luhenry
luhenry marked this pull request as ready for review October 1, 2026 01:36
luhenry added a commit that referenced this pull request Oct 1, 2026
@luhenry
luhenry merged commit 8b761f9 into main Oct 1, 2026
11 checks passed
@luhenry
luhenry deleted the atheris branch October 1, 2026 09:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant