Skip to content

feat(replay): add historical POV replay workflow#214

Merged
fuyu0425 merged 25 commits into
mainfrom
feat/0day-reproducer
Apr 28, 2026
Merged

feat(replay): add historical POV replay workflow#214
fuyu0425 merged 25 commits into
mainfrom
feat/0day-reproducer

Conversation

@fuyu0425

Copy link
Copy Markdown
Member

Summary

  • add the replay-povs workflow to replay discovered POVs against the latest OSS-Fuzz project state and current harness set
  • reuse warm replay containers and persistent OSS-Fuzz helper/project caches, with serialized plain-build reuse and resume-safe group checkpoints
  • emit replay artifacts, provenance maps, raw 0day outputs, and crash-signature-deduped 0day-dedup.json, with docs and regression coverage for the contract

Testing

  • uv run pytest tests/test_replay_engine.py -v
  • uv run ruff format crsbench/ tests/
  • scripts/ci-tests/run-local.sh checks

Notes

  • branch includes the full replay implementation stack: source discovery, latest-project sync, warm-session execution, artifact/provenance recording, 0day filtering, and replay output documentation

fuyu0425 added 25 commits April 27, 2026 05:10
Add --cache-root for replay-povs so helper and latest-project state can be reused across runs under cache-local locks.

Invalidate plain OSS-Fuzz build reuse when the current projects/<name> tree changes by storing a project fingerprint in build metadata, and extend replay 0day detection to include Java exception patterns already used by POV verification.
@fuyu0425 fuyu0425 merged commit d1f1a60 into main Apr 28, 2026
5 checks passed
@fuyu0425 fuyu0425 deleted the feat/0day-reproducer branch April 28, 2026 02:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant