Add ASan for honggfuzz & speed-up AFL++

[chris-srlabs]

Enable --asan for honggfuzz and remove the opt-level=0 restriction for afl++ (fixes #130).
Restore persistent fuzzing with honggfuzz and read metadata from Cargo.toml allowing to restrict a harness to certain fuzzers only:

[package.metadata.ziggy]
compat = ["afl"]
# compat = ["honggfuzz"]

when no metadata exists, it is assumed to compile for both afl++ and honggfuzz.

[Copilot]

Pull request overview

Enables optimized ASan fuzzing, restores persistent honggfuzz execution, and adds per-harness fuzzer compatibility metadata.

Changes:

• Adds honggfuzz ASan support and persistent fuzzing.
• Enables optimized AFL++ ASan builds and conditionally disables CMPLOG.
• Adds compatibility metadata handling, tests, and CI updates.

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
.github/workflows/ci.yml	Adds semver checks and pins nightly.
Cargo.lock	Refreshes dependency resolutions.
Cargo.toml	Adds Tokio feature compatibility.
examples/asan/src/main.rs	Preserves the ASan-triggering read.
src/bin/cargo-ziggy/build.rs	Enables honggfuzz ASan and optimized AFL++.
src/bin/cargo-ziggy/coverage.rs	Simplifies formatting expressions.
src/bin/cargo-ziggy/fuzz.rs	Gates CMPLOG and configures honggfuzz ASan.
src/bin/cargo-ziggy/main.rs	Adds fuzzer compatibility metadata handling.
src/bin/cargo-ziggy/minimize.rs	Simplifies formatting expressions.
src/bin/cargo-ziggy/plot.rs	Removes an unnecessary borrow.
src/bin/cargo-ziggy/run.rs	Removes forced ASan opt-level zero.
src/bin/cargo-ziggy/triage.rs	Simplifies directory checks.
src/lib.rs	Restores persistent honggfuzz looping.
tests/asan_fuzz.rs	Expands AFL++ and honggfuzz ASan tests.

Suppressed comments (2)

src/bin/cargo-ziggy/main.rs:588

• This overwrites an explicit --engine choice: when both fuzzers are compatible, requesting AFL-only or honggfuzz-only is changed to All; when only one is compatible, an explicitly incompatible choice is silently switched. Intersect the requested engine with compatibility and reject an empty intersection.

                minimize.engine = match (with_afl, with_honggfuzz) {
                    (true, true) => FuzzingEngines::All,
                    (true, false) => FuzzingEngines::AFLPlusPlus,
                    (false, true) => FuzzingEngines::Honggfuzz,
                    _ => bail!("harness is not compatible with any fuzzer"),

src/bin/cargo-ziggy/main.rs:581

• These assignments discard explicit --no-afl/--no-honggfuzz options whenever the corresponding engine is listed as compatible. Preserve user exclusions and only add exclusions required by metadata.

                fuzz.no_afl = !with_afl;
                fuzz.no_honggfuzz = !with_honggfuzz;

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[chris-srlabs]

e09a97a makes package selection more robust

[chris-srlabs]

fixed in e09a97a

[vanhauser-thc]

please see my comment plus the two from copilot. dunno about the workspace one, but the compact I agree.

[vanhauser-thc]

Lgtm, thanks