Newer libevent causes `http_request` fuzz target failure about bitcoin

[fanquake]

Is there something for this repo to do here? If that patch should be applied, then this should be a PR? If not, I guess close this?

[hebasto]

Is there something for this repo to do here? If that patch should be applied, then this should be a PR? If not, I guess close this?

I'm in the middle of the investigation.

[hebasto]

Is there something for this repo to do here? If that patch should be applied, then this should be a PR? If not, I guess close this?

I'm in the middle of the investigation.

The crash is reproducible on Linux as well.

[fanquake]

The crash is reproducible on Linux as well.

Can you post steps to reproduce. What version of libevent.

[hebasto]

The crash is reproducible on Linux as well.

Can you post steps to reproduce.

Compiling with depends in this branch. Then:

FUZZ=http_request ./src/test/fuzz/fuzz /home/hebasto/git/bitcoin/qa-assets/fuzz_seed_corpus/http_request

What version of libevent.

libevent/libevent@4d85d28

[fanquake]

Ok, then I think this can be closed. The problem here primarily seems to be that Microsoft/vcpkg is shipping unreleased code into production.

[maflcko]

(I deleted my comment, because the fuzz CI config does not use depends, but the libevent-dev from Ubuntu)

[fanquake]

Ok. Edited my comment as well. This can still be closed. Maybe an issue can be filed with vcpkg to only ship stable code in production.

[hebasto]

Ok, then I think this can be closed. The problem here primarily seems to be that Microsoft/vcpkg is shipping unreleased code into production.

I agree. I opened this issue to document hebasto#199.

Closing.