<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>


<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">

<div></div>
<p dir="auto">Not all wrong code behaviour will cause the gnutls binary to misbehave on TLS level or to crash.</p>
<p dir="auto">To make it more likely to find issues in error handling code, the tlsfuzzer test suite should be ran against gnutls built with clang Address Sanitizer and Undefined Behaviour Sanitizer (possibly others)</p>
<p dir="auto">I've talked about it with <a href="https://gitlab.com/ansasaki" data-user="2082418" data-reference-type="user" data-container="body" data-placement="bottom" class="gfm gfm-project_member" title="Anderson Sasaki">@ansasaki</a> and he said that the tlsfuzzer is already ran against gnutls running under valgrind, it's clang/ubsan that's missing, but it is used for the FreeBSD run.</p>

</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">

<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/issues/741">view it on GitLab</a>.
<br>
You're receiving this email because of your account on gitlab.com.
If you'd like to receive fewer emails, you can
<a href="https://gitlab.com/sent_notifications/8009e39cd83d54400a9b068de3039933/unsubscribe">unsubscribe</a>
from this thread or
adjust your notification settings.
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/issues/741"}}</script>

</p>
</div>
</body>
</html>