# Fuzzing Wickra

[`cargo-fuzz`](https://rust-fuzz.github.io/book/cargo-fuzz.html) harnesses for
the parsing and stateful entry points of Wickra. Fuzzing requires a nightly
Rust toolchain.

## Setup

```bash
cargo install cargo-fuzz
rustup toolchain install nightly
```

## Targets

| Target | What it exercises |
| --- | --- |
| `csv_reader` | `CandleReader` over arbitrary bytes — headers, cells, BOM, binary noise. |
| `binance_envelope` | `RawWsEnvelope` deserialization from arbitrary strings. |
| `indicator_update` | RSI / EMA streaming + batch over arbitrary `f64` sequences (NaN, ±inf, jumps). |
| `tick_aggregator` | `TickAggregator` over arbitrary `(price, volume, timestamp)` triples. |

## Run

```bash
# From the repository root:
cargo +nightly fuzz run csv_reader
cargo +nightly fuzz run binance_envelope
cargo +nightly fuzz run indicator_update
cargo +nightly fuzz run tick_aggregator
```

Each run continues until a crash is found or it is interrupted. A short
time-boxed smoke run is useful in CI:

```bash
cargo +nightly fuzz run csv_reader -- -max_total_time=60
```

The expectation for every target is that it never panics: malformed or
adversarial input must surface as an `Err`, never a crash.