From f662d192f337f715de3d802c3b455f50a7fae133 Mon Sep 17 00:00:00 2001 From: Georg Semmler Date: Tue, 27 May 2025 14:42:07 +0200 Subject: [PATCH] Remove images from published crates.io source code While reviewing dependencies I noticed that the published source code of the `afl` crate includes binary data (images). Removing them reduces the size of the published tar-ball from 1.3MB to 6KB, which is a size reduction of several orders of magnitude. This would save crates.io more than 125GB of traffik per 90 days according to their download numbers. There are two main benifits of that change: * Drastical reduction of download size * Removes binary data from a crates that contains a build script, which hopefully makes the crate a bit more robust against potential supply chain attacks similar to the xz incident. The images seem to be used in the Readme. I've replaced them with links to the images hosted at github there so that the readme is still rendered correctly at crates.io. --- README.md | 4 ++-- afl/Cargo.toml | 1 + cargo-afl/Cargo.toml | 1 + 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 7516a9595..af618b3c8 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@

- afl.rs logo + afl.rs logo
afl.rs

@@ -16,7 +16,7 @@ Documentation can be found in the [Rust Fuzz Book](https://rust-fuzz.github.io/b ## What does it look like? -Screen recording of afl +Screen recording of afl Screen recording of AFL running on Rust code. diff --git a/afl/Cargo.toml b/afl/Cargo.toml index 168e88d93..f3f4835ac 100644 --- a/afl/Cargo.toml +++ b/afl/Cargo.toml @@ -11,6 +11,7 @@ description = "Fuzzing Rust code with american-fuzzy-lop" repository = "https://github.com/rust-fuzz/afl.rs" homepage = "https://github.com/rust-fuzz/afl.rs" edition = "2021" +exclude = ["etc"] [build-dependencies] home = "0.5" diff --git a/cargo-afl/Cargo.toml b/cargo-afl/Cargo.toml index 6e0418df4..f226e8ed5 100644 --- a/cargo-afl/Cargo.toml +++ b/cargo-afl/Cargo.toml @@ -12,6 +12,7 @@ description = "Fuzzing Rust code with american-fuzzy-lop" repository = "https://github.com/rust-fuzz/afl.rs" homepage = "https://github.com/rust-fuzz/afl.rs" edition = "2021" +exclude = ["etc"] [build-dependencies] anyhow = { version = "1.0", features = ["backtrace"] }