mirror of
https://github.com/askama-rs/askama.git
synced 2025-09-27 13:00:57 +00:00
cfa21a6513
In macro invocations, the input `i"` was interpreted as the identifier `i`, and the `"` was consumed without being interpreted. This change makes the code not ignore the quotation mark. Resolves <https://issues.oss-fuzz.com/issues/440177293>.
Askama Fuzzing
First install cargo-fuzz and rust-nightly (once):
cargo install cargo-fuzz
rustup install nightly
Then execute in this folder:
RUST_BACKTRACE=1 nice cargo +nightly fuzz run <fuzz_target>
fuzz_target is one out of all, filters, html or parser.
The execution won't stop, but continue until you kill it with ctrl+c.
Or until it finds a panic.
If the execution found a panic, then a file with the input scenario is written, e.g.
fuzz/artifacts/parser/crash-b91ab….
To get more information about the failed scenario, run or debug this command with the given path:
cargo run -- <fuzz_target> fuzz/artifacts/parser/crash-b91ab…
Find more information about fuzzing here:
cargo fuzz help run- https://rust-fuzz.github.io/book/cargo-fuzz.html