From 1b8ee398c7bc1e2a70641cf48a207c01cb0a25f0 Mon Sep 17 00:00:00 2001
From: Derek Nola <derek.nola@suse.com>
Date: Wed, 2 Jul 2025 10:24:10 -0700
Subject: [PATCH] Add basic fuzz test

Signed-off-by: Derek Nola <derek.nola@suse.com>
---
 pkg/authenticator/hash/scrypt_test.go | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/pkg/authenticator/hash/scrypt_test.go b/pkg/authenticator/hash/scrypt_test.go
index cfec9b11a2..6937cebda3 100644
--- a/pkg/authenticator/hash/scrypt_test.go
+++ b/pkg/authenticator/hash/scrypt_test.go
@@ -37,3 +37,21 @@ func Test_UnitSCrypt_VerifyHash(t *testing.T) {
 		})
 	}
 }
+
+func FuzzVerifyHash(f *testing.F) {
+	hasher := NewSCrypt()
+	validSecret := "my-secret-password"
+	validHash, _ := hasher.CreateHash(validSecret)
+
+	// Seed the fuzzer with some valid and invalid inputs
+	f.Add(validHash, validSecret)
+	f.Add(validHash, "wrong-password")
+	f.Add("", "")
+	f.Add("$1:deadbeef:f:8:1:corrupt-hash", "any-password")
+	f.Add("", validSecret)
+	f.Add(validHash, "")
+
+	f.Fuzz(func(t *testing.T, hash, secretKey string) {
+		_ = hasher.VerifyHash(hash, secretKey)
+	})
+}