Generator-jhipster: Suggestion: Add JQF support for fuzz testing

[yevgenypats]

Hi Team,

I'm a contributor to JQF which is a coverage guided structure aware fuzzer for java which already found quite nice bugs.

Currently it is based on Junit4 + quickcheck but if this will be interesting we can make it work for junit5 as well.

would love to hear your thoughts on adding support for this in additional to classic junit5 unit-tests.

Feel free to ask questions.

cc @PierreBesson
cc @rohanpadhye maintainer of JQF

[atomfrede]

Hi @yevgenypats ,

It sounds like a nice tool. How is it different to jqwik? Did I get it right, that jqwik would be an alternative to quickcheck and JQF generates properties?

In general it sounds like a great candidate for a module, which adds the required dependencies and the new tests maybe.

[yevgenypats]

hi @atomfrede yes exactly to support junit5 will probably will have to integrate with jqwik and JQF will generate the properties using the coverage guided algorithm.

In terms of module - isn't it supposed to be exactly where the junit tests are generated? do you have an example of module that implement test functionality?

[PierreBesson]

We already have a question in the main generator asking for additional test frameworks : currently for java, I think we only have Cucumber and Gatling. I would say we can consider JQF for addition after looking at an initial POC of JHipster+JQF. Or maybe it can be supported with a JHipster module. I have no experience with fuzzing so I'm quite curious how it would be implemented in a real world web application like JHipster.

[yevgenypats]

@PierreBesson for the quick response. Yes, I agree a PoC is totally needed to evaluate this. Cool so I'll try to come up with a PoC draft of JHipster+JQF. probably I'll have some questions so I'll post here.

[atomfrede]

@yevgenypats Don't hesitate to ask if you have any questions. This also sounds like a good hacktoberfest thing.
In general a module can create new files, in particular new test files or so.

[pascalgrimaud]

Closing this as it should go to module