Releases: CodeIntelligenceTesting/jazzer
Releases · CodeIntelligenceTesting/jazzer
v0.23.0
What's Changed
- tests: Restore live output of
java_fuzz_target_test
by @fmeum in #875 - driver: Fix startup crash when fuzzing native libraries by @fmeum in #883
- Remove cifuzz references by @bertschneider in #892
- build: update toolchains_llvm dependency by @bertschneider in #897
- docs: update readme to inform about commercial offering by @jochil in #898
- doc: Add updated links to README by @HenrichN in #900
- Jazzer Pro by @kyakdan in #906
- Adjust license to clarify the usage within OSS-Fuzz by @serj in #909
- Change license back to Apache2 by @serj in #913
- Update macOS to 14 in the CI by @kyakdan in #914
- ci: Update softprops/action-gh-release to v2.2.0 in prerelease workflow by @zgtm in #916
- Fix prerelease pipeline by @zgtm in #917
- Fix maven deployment by @zgtm in #918
New Contributors
- @jochil made their first contribution in #898
- @HenrichN made their first contribution in #900
- @serj made their first contribution in #909
Full Changelog: v0.22.1...v0.23.0
v0.22.1
What's Changed
- Feature: junit: The API of @DirectoryEntries and @DictionaryFile has changed compared to v0.22.0.
Full Changelog: v0.22.0...v0.22.1
v0.22.0
What's Changed
- Breaking change: junit: The
Lifecycle.PER_EXECUTION
mode of@FuzzTest
now provides a new test instance for each fuzz test, with support forTestInstancePostProcessor
's (#867) - Experimental feature (subject to change in a future version): junit: Dictionaries can be added to fuzz tests via
@DirectoryEntries
and@DictionaryFile
(#862) - Bugfix: Hooks can now also instrument classes on the extension classpath (#869)
Full Changelog: v0.21.1...v0.22.0
v0.21.1
What's Changed
No functional changes to the Maven artifacts.
- Bugfix:
jazzer_standalone.jar
in the release archives can be executed withjava -jar
(#858)
See v0.21.0 for the full release notes.
Full Changelog: v0.21.0...v0.21.1
v0.21.0
What's Changed
- Breaking change: Bugfixes for edge cases in
FuzzedDataProvider
can result in altered behavior when reproducing old findings (ed7e7b2) - Feature: junit: The new
lifecycle
parameter of@FuzzTest
can be set toPER_EXECUTION
to run "before each" and "after each" lifecycle methods and extension callbacks for each individual execution of a fuzz test rather than just once per test (#833, #851) - Feature: junit:
@FuzzTest
can now be applied to other annotations as a meta-annotation, allowing for the creation of custom reusable fuzz test annotations (#849) - Feature: Improved
Map
instrumentation (#845) - Bugfix: junit: Only create
.cifuzz-corpus
if it is the generated corpus (#855)
Full Changelog: v0.20.1...v0.21.0
v0.20.1
v0.20.0
What's Changed
- Breaking change: Boolean-valued
JAZZER_*
environment variables are parsed more strictly and fail on values that aren't obviously truthy or falsy (#815) - Feature: Compatibility with JDK 21 (#785 by @cushon, #820)
- Feature: Comparison instrumentation for Clojure standard library functions (#805, #827)
- Feature: junit:
@Timeout
can now be used to configure per-class and per-test timeouts for individual fuzz test executions (#825) - Feature: junit:
@FuzzTest#maxExecutions
can be used to limit the number of executions of a fuzz test during fuzzing - Feature: junit: Jazzer command-line options can be set via JUnit configuration parameters
- Bugfix: LibFuzzer options that use subprocesses are supported more reliably and in the docker container (#748 by @svenkeidel, #793, #824)
- Bugfix: Instrumented
Byte#compare
andShort#compare
calls no longer throw an exception (#792, reported by @jarnokie) - Bugfix: junit: Fixed running on individual files from the command line (#819)
- Error messages for JUnit 5 fuzz test setup issues have been improved
New Contributors
- @WillRoque made their first contribution in #782
- @cushon made their first contribution in #785
- @svenkeidel made their first contribution in #784
Full Changelog: v0.19.0...v0.20.0
v0.19.0
What's Changed
- Feature: Rework Opt value handling (#767)
- Feature: Generate temporary seeds with deterministic names (#744)
Full Changelog: v0.18.0...v0.19.0
v0.18.0
What's Changed
- Feature: Add script engine injection sanitizer with real life example by @gdemarcsek (#531)
- Feature: Add equals-hook for Clojure (clojure.lang.Util.equiv) (#765)
- Bugfix: Do not prepare for a subprocess for
-fork=0
(#758) - Bugfix: Honor explicitly stated corpus directory (#761)
- Bugfix: Ignore JetBrains classes during instrumentation (#763)
New Contributors
- @zgtm made their first contribution in #751
- @gdemarcsek made their first contribution in #531
Full Changelog: v0.17.1...v0.18.0
v0.17.1
What's Changed
This release fixes an issue with a corrupted upload to Maven Central.
No changes since v0.17.0 except for the patch version bump.
Full Changelog: v0.17.0...v0.17.1