From dc4725884107fe3c6f0853f2aebae5652e7d8fe2 Mon Sep 17 00:00:00 2001 From: John Turner Date: Mon, 17 Nov 2025 22:45:41 +0000 Subject: [PATCH] reject fuzz inputs with invisible characters --- fuzz/fuzz.rs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fuzz/fuzz.rs b/fuzz/fuzz.rs index fd01914..8fadc86 100644 --- a/fuzz/fuzz.rs +++ b/fuzz/fuzz.rs @@ -41,6 +41,10 @@ pub unsafe extern "C" fn LLVMFuzzerTestOneInput(input: *const u8, len: usize) -> Err(_) => return -1, }; + if !str.chars().all(|c| c.is_ascii_graphic()) { + return -1; + } + let atom = str.trim(); let mut stdin = PY_PROCESS.stdin.lock().expect("failed to get stdin lock");