Near-100% test coverage did not catch a CVE in my Go library

Near-100% test coverage did not catch a CVE in my Go library(blog.reqproof.com)

2 points by LeonidBugaev 63 days ago | 1 comment

for parsers, malformed input probably has to be part of the actual spec, not just an edge case. A small set of bad-input tests plus fuzzing seems more useful than chasing the last few percent of line coverage

emanuele-em 63 days ago |

for parsers, malformed input probably has to be part of the actual spec, not just an edge case. A small set of bad-input tests plus fuzzing seems more useful than chasing the last few percent of line coverage