feat: add fuzzing

.gitignore

@@ -3,6 +3,7 @@
 .idea/
 
 target/
+fuzz/Cargo.lock
 
 .DS_Store
 

Cargo.toml

@@ -60,6 +60,7 @@ jmt = { git = "https://github.com/penumbra-zone/jmt", commit = "46b4b00" }
 # External dependencies
 async-trait = "0.1.71"
 anyhow = "1.0.68"
+arbitrary = { version = "1.3.0", features = ["derive"] }
 borsh = { version = "0.10.3", features = ["rc", "bytes"] }
 # TODO: Consider replacing this serialization format
 #     https://github.com/Sovereign-Labs/sovereign-sdk/issues/283

Makefile

@@ -33,9 +33,12 @@ lint-fix:  ## cargo fmt, fix and clippy
 	cargo fix --allow-dirty
 	cargo clippy --fix --allow-dirty
 
-check-features: ## Checks that project compiles with all combinations of features
+check-features: check-fuzz ## Checks that project compiles with all combinations of features
 	cargo hack --feature-powerset check
 
+check-fuzz: ## Checks that fuzz member compiles
+	$(MAKE) -C fuzz check
+
 find-unused-deps: ## Prints unused dependencies for project. Note: requires nightly
 	cargo udeps --all-targets --all-features
 

README.md

@@ -106,6 +106,10 @@ to have adapters for almost all Data Availability Layers and LLVM-compatible pro
 maintain adapters for [`Risc0`](https://www.risczero.com) (a ZKVM) and [`Celestia`](https://www.celestia.org) a (DA layer).
 The Avail project also maintains an adapter for their DA layer, which can be found [here](https://github.com/availproject/avail-sovereign-da-adapter).
 
+## Testing
+
+An implementation of LLVM's libFUZZER is available under [fuzz/README.md](./fuzz/README.md).
+
 ## Warning
 
 The Sovereign SDK is Alpha software. It has not been audited and should not be used in production under any circumstances.

adapters/celestia/src/shares.rs

@@ -279,6 +279,11 @@ impl std::error::Error for ShareParsingError {}
 impl NamespaceGroup {
     pub fn from_b64(b64: &str) -> Result<Self, ShareParsingError> {
         let mut decoded = Vec::with_capacity((b64.len() + 3) / 4 * 3);
+        if b64.is_empty() {
+            error!("Empty input");
+            return Err(ShareParsingError::ErrWrongLength);
+        }
+
         // unsafe { decoded.set_len((b64.len() / 4 * 3)) }
         if let Err(err) = B64_ENGINE.decode_slice(b64, &mut decoded) {
             info!("Error decoding NamespaceGroup from base64: {}", err);