Skip to content

fuzz: add Tracestate fuzzing target using Hypothesis + atheris - #5792

Open
herin049 wants to merge 2 commits into
open-telemetry:mainfrom
herin049:feat/fuzz
Open

herin049 wants to merge 2 commits into
open-telemetry:mainfrom
herin049:feat/fuzz

Conversation

@herin049

Copy link
Copy Markdown
Contributor

Description

Adds initial scaffolding for fuzz testing with Hypothesis + atheris. Initial scaffolding contains a single target for trace state parsing.

Type of change

Please delete options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist:

See contributing.md for styleguide, changelog guidelines, and more.

  • I am a human and not a bot
  • I have run tox -e precommit
  • I have run tox -e typecheck
  • I have run the relevant tests and linting tox environments
  • This requires the following PR in contrib:

@herin049
herin049 requested a review from a team as a code owner October 17, 2026 21:20
@opentelemetry-pr-dashboard

opentelemetry-pr-dashboard Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

Pull request dashboard status

Waiting on the author · refreshed 2026-10-22 17:35 UTC

Respond to 1 review item (e.g. link a commit, explain why not, ask a follow-up):

  • Inline threads: 1
Status above doesn't look right?
  • Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
  • Should this be with reviewers? Comment /dashboard route:reviewers to route it to them.
  • Anything wrong — including the routing? Report it with what you expected; it helps us improve the dashboard.

@herin049 herin049 added the Skip Changelog PRs that do not require a CHANGELOG.md entry label Oct 18, 2026
@tammy-baylis-swi tammy-baylis-swi moved this to Ready for review in Python PR digest Oct 22, 2026


def main() -> None:
atheris.Setup(sys.argv, test_tracestate.hypothesis.fuzz_one_input)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could we instrument fuzz_one_input before passing it to Atheris? A fresh run locally exits after two inputs with “no interesting inputs were found,” because Hypothesis returns before reaching the instrumented OpenTelemetry code.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Skip Changelog PRs that do not require a CHANGELOG.md entry

Projects

Status: Ready for review

Development

Successfully merging this pull request may close these issues.

3 participants