PASETO tokens for OCaml - v3.local (AES-256-CTR) and v4.local (XChaCha20)
Reject duplicate CBOR keys in VDS import
import used List.find_opt on raw map pairs, so a duplicate
"version" or "entries" key would shadow later occurrences.
Now checks for byte-equal duplicate keys before field extraction,
consistent with the receipt parser's cbor_check_unique_keys.
+4
-5
+4
-5
fuzz/dune
+4
-5
fuzz/dune
···
15
15
(alias fuzz)
16
16
(enabled_if
17
17
(= %{profile} afl))
18
-
(deps
19
-
(source_tree corpus)
20
-
fuzz.exe
21
-
gen_corpus.exe)
18
+
(deps fuzz.exe)
22
19
(action
23
-
(echo "AFL fuzzer built: %{exe:fuzz.exe}\n")))
20
+
(progn
21
+
(run %{exe:fuzz.exe} --gen-corpus corpus)
22
+
(run afl-fuzz -V 60 -i corpus -o _fuzz -- %{exe:fuzz.exe} @@))))