Use `honggfuzz`'s `--run-time` arg to limit per-fuzz runtime in CI
What the developer wrote
Authored by Matt Corallo
Use `honggfuzz`'s `--run-time` arg to limit per-fuzz runtime in CI
We have some complexity in `ci-fuzz.sh` to limit each fuzzer to a
rough runtime, but `honggfuzz` has a `--run-time` argument that we
can simply use instead, which we do here.
What changed, and why it matters
This commit is a cleanup of the project's continuous integration fuzz-testing script. It replaces a custom, per-target method of limiting how long each fuzz test runs with a built-in honggfuzz command-line option (`--run_time 30`). There is no change to the actual Lightning protocol code, cryptography, networking, or any code that end users run. It only affects how long automated fuzzing jobs run in CI.
No security action required. Reviewers may optionally verify that 30 seconds per fuzz target still provides adequate CI fuzzing coverage compared to the previous iteration-based limits.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change is confined to fuzz/ci-fuzz.sh. Previously the script set iteration counts (-N...) per fuzz target to approximate a runtime budget. The patch removes those per-target -N values and instead passes --run_time 30 (30 seconds) to every cargo hfuzz run invocation, keeping only the -F 64 flag for two specific targets. This is a tooling/CI configuration simplification with no functional impact on the rust-lightning library or binaries.
Changed components
fuzz/ci-fuzz.shInspect captured patch +3 / −11
diff --git a/fuzz/ci-fuzz.sh b/fuzz/ci-fuzz.sh
index d1274d7..d57a5ad 100755
--- a/fuzz/ci-fuzz.sh
+++ b/fuzz/ci-fuzz.sh
@@ -33,17 +33,9 @@ cargo --color always hfuzz build -j8
for TARGET in src/bin/*.rs; do
FILENAME=$(basename $TARGET)
FILE="${FILENAME%.*}"
- HFUZZ_RUN_ARGS="--exit_upon_crash -v -n8"
- if [ "$FILE" = "chanmon_consistency_target" ]; then
- HFUZZ_RUN_ARGS="$HFUZZ_RUN_ARGS -F 64 -N1000"
- elif [ "$FILE" = "process_network_graph_target" -o "$FILE" = "full_stack_target" -o "$FILE" = "router_target" -o "$FILE" = "lsps_message_target" ]; then
- HFUZZ_RUN_ARGS="$HFUZZ_RUN_ARGS -N10000"
- elif [ "$FILE" = "indexedmap_target" ]; then
- HFUZZ_RUN_ARGS="$HFUZZ_RUN_ARGS -N100000"
- elif [ "$FILE" = "fs_store_target" ]; then
- HFUZZ_RUN_ARGS="$HFUZZ_RUN_ARGS -F 64 -N10000"
- else
- HFUZZ_RUN_ARGS="$HFUZZ_RUN_ARGS -N1000000"
+ HFUZZ_RUN_ARGS="--exit_upon_crash -v -n8 --run_time 30"
+ if [ "$FILE" = "chanmon_consistency_target" -o "$FILE" = "fs_store_target" ]; then
+ HFUZZ_RUN_ARGS="$HFUZZ_RUN_ARGS -F 64"
fi
export HFUZZ_RUN_ARGS
cargo --color always hfuzz run $FILE
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.