[Gerald Combs <gerald@xxxxxxxxxxxx>]

Thomas Anders wrote:
> Gerald Combs wrote:
> 
>> Thomas Anders wrote:
>>
>>> Can this be improved? My initial idea was to
>>> - add a test scenario that also adds some sort of fuzz to the preference
>>> settings (i.e. always changes them slightly)?
>>> - have more people run randpkt/fuzz testing themselves with *their*
>>> current (non-default) preference settings
> 
> [...]
> 
>> If we were to make the hints more easily parsed (e.g. by quoting any
>> enum options), we could pick a preference at random and feed a fuzzed
>> value to tethereal using the "-o" flag.  To make parsing easier we could
>> provide a method (e.g. "-G preferences") to dump the default preferences
>> to stdout.
> 
> 
> Reasonably addresses my first idea. What about the second? Should we add
> a "fuzz testing" section to the wiki that describes how people can join
> the effort? On a related note, the Wiki Security page already needs an
> update now that we have fuzz testing:
> 
> http://wiki.ethereal.com/Security#head-9c187c125c2ea93d6fc2c6c6e908752ff6e8e39e

I think the second idea is essential - we need as many people fuzz
testing as possible.  I've added an initial FuzzTesting page on the
wiki, along with a link from the Security page.  Should I add a "call
for fuzz testers" link to the front page on the main site?