Add Masterminds/semver — semantic version parsing library (Go, zero deps)#15643
Add Masterminds/semver — semantic version parsing library (Go, zero deps)#15643canolgun wants to merge 2 commits into
Conversation
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
|
canolgun-commits is integrating a new project: |
|
@googlebot I signed it! |
|
I have signed the Google CLA (canolgun@gmail.com). The CLA check at https://cla.developers.google.com/ shows signed. Please re-trigger the check. |
|
CLA should now be linked to GitHub username canolgun-commits. @googlebot please recheck. |
semantic version parsing library (Go, zero deps). 4 fuzz targets: VersionCompare, VersionRoundTrip, IncOverflow, ConstraintVersionCheck. Sanitizers: address, memory Engine: libfuzzer (Go native fuzz)
7942c87 to
e3efd05
Compare
|
Merged into #15627 — all 10 integrations now in one PR. |
Masterminds/semver is a widely-used Go library for semantic version parsing,
constraint matching, and version comparison. It has zero external dependencies
and 3K+ GitHub stars, making it an ideal OSS-Fuzz candidate.
Fuzz targets (4 new)
FuzzVersionCompareFuzzVersionRoundTripFuzzIncOverflowFuzzConstraintVersionCheckUpstream fuzz targets (3 existing, enriched)
The upstream repo already has 3 fuzz targets (
FuzzNewVersion,FuzzStrictNewVersion,FuzzNewConstraint). This integration adds 4 additional targets focusing on invariants, overflow safety, and nil-pointer resilience.Sanitizers
Fuzzing engine