Skip to content

fix: address FuzzRecursiveCompile flakes#1365

Merged
egibs merged 1 commit into
chainguard-dev:mainfrom
egibs:fix-recursive-compile-flake
Feb 7, 2026
Merged

fix: address FuzzRecursiveCompile flakes#1365
egibs merged 1 commit into
chainguard-dev:mainfrom
egibs:fix-recursive-compile-flake

Conversation

@egibs
Copy link
Copy Markdown
Member

@egibs egibs commented Feb 6, 2026

We hit some more FuzzRecursiveCompile failures which seem to be intermittent. Part of the issue was that we were allowing non-printable ASCII characters in fuzzed rules which result in panics. Otherwise, the compiler can handle invalid rules and error (which we don't care about).

This PR also avoids adding the large third-party rule file which clocks in at ~19MB to the seed corpus and sets a higher context timeout when the compiler is trying to compile rules which involves CGO calls which cannot be interrupted.

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
@egibs egibs requested a review from stevebeattie February 6, 2026 21:20
@egibs egibs enabled auto-merge (squash) February 6, 2026 21:24
@egibs egibs merged commit 0e268af into chainguard-dev:main Feb 7, 2026
18 checks passed
@egibs egibs deleted the fix-recursive-compile-flake branch February 9, 2026 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants