Factorio Forums

would be good for fuzzing. or even better would be with afl++ but i dont exspect you to do that given that would requre installing afl++. but yea do you think you would be able to compile the game with asan and put it on a steam beta or something? its fine if not just would make it easyer for people looking for vunerabilitys to find them. (like me)

or if the anser is no i would love a exsplinatson as to why not. it wouldnt give much new info given that you already send out the game symbles.

I believe they do that internally (in testing), I'd have to check my sources though.

Addendum: source

We already do compile and run our test suite with ASAN and TSAN on every commit on every branch.

Rseding91 wrote: Mon Apr 28, 2025 11:10 pm We already do compile and run our test suite with ASAN and TSAN on every commit on every branch.

oh nice! do you think you could have a seprite verson with ASAN (and optsonaly tsan) as a steam beta or something so people like me who want to do fuzzing can know when we found a vunerability easyer?

ilikehackinggames wrote: Tue Apr 29, 2025 12:45 am oh nice! do you think you could have a seprite verson with ASAN (and optsonaly tsan) as a steam beta or something so people like me who want to do fuzzing can know when we found a vunerability easyer?

Not likely. Every additional build takes more time during each release. Additionally: we only build with ASAN and TSAN on the linux version, and I'm unsure if we could even build them with the steam libraries. Additionally additionally: steam betas have a limited number of slots for us to use.

hmm i mean you could also put them on the websites. and most people who want to find vunerabilitys use linux. as for the build time thats honistly fair enough of a reson. thanks anyways.

wait no your talking about a steam build. the linux native build wouldnt have that issue as you already make it with asan.