Context
The repository does not use fuzz testing or property-based testing. The query parser (timeseriesql) and HTTP request handlers are natural targets for fuzzing.
Deliverables
- Add
cargo-fuzz targets for:
- Line protocol parser — feed random byte sequences, check for panics
- Query parser — feed random strings, check for panics
- JSON write endpoint — feed random JSON, check for 5xx
- Config file parser — feed random TOML, check for panics
- Setup fuzz CI job (not required, but document how to run fuzz targets)
- Fix any panics discovered during fuzz target development
References
Priority
P2 — Security hardening, test coverage
Context
The repository does not use fuzz testing or property-based testing. The query parser (
timeseriesql) and HTTP request handlers are natural targets for fuzzing.Deliverables
cargo-fuzztargets for:References
src/timeseriesql/— query parsersrc/adapters/http/write.rs— line protocol and JSON write handlerscargo-fuzzbook: https://rust-fuzz.github.io/book/Priority
P2 — Security hardening, test coverage