From 2f57404a4621d551f9db72ce8317a54cbfa66f2c Mon Sep 17 00:00:00 2001
From: Yoo_LCD <yoyosan0929@gmail.com>
Date: Wed, 11 Mar 2026 12:57:52 +0900
Subject: [PATCH] Add config and priority fuzz tests

---
 fuzz_config_test.go | 98 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 98 insertions(+)
 create mode 100644 fuzz_config_test.go

diff --git a/fuzz_config_test.go b/fuzz_config_test.go
new file mode 100644
index 000000000..d25b2e60a
--- /dev/null
+++ b/fuzz_config_test.go
@@ -0,0 +1,98 @@
+package viper
+
+import (
+	"bytes"
+	"strings"
+	"testing"
+)
+
+func runConfigFuzz(tb testing.TB, data []byte, configType string) {
+	if len(data) > 1<<20 {
+		return
+	}
+
+	v := New()
+	v.SetConfigType(configType)
+
+	if err := v.ReadConfig(bytes.NewReader(data)); err != nil {
+		return
+	}
+
+	allKeys := v.AllKeys()
+	for _, key := range allKeys {
+		// Exercise various getters to maximize code coverage
+		_ = v.Get(key)
+		_ = v.GetString(key)
+		_ = v.GetInt(key)
+		_ = v.GetBool(key)
+		_ = v.GetStringSlice(key)
+		_ = v.IsSet(key)
+	}
+	v.AllSettings()
+	_ = v.Unmarshal(&map[string]any{})
+}
+
+func FuzzConfigYAML(f *testing.F) {
+	f.Add([]byte(`key: value`))
+	f.Add([]byte(`nested: { key: value }`))
+	f.Add([]byte(`key: null`))
+	f.Add([]byte(strings.Repeat("a: b\n", 100)))
+	f.Add([]byte(``))
+	f.Add([]byte(`---`))
+	f.Add([]byte(`~`))
+
+	f.Fuzz(func(t *testing.T, data []byte) {
+		runConfigFuzz(t, data, "yaml")
+	})
+}
+
+func FuzzConfigJSON(f *testing.F) {
+	f.Add([]byte(`{"key": "value"}`))
+	f.Add([]byte(`{}`))
+	f.Fuzz(func(t *testing.T, data []byte) {
+		runConfigFuzz(t, data, "json")
+	})
+}
+
+func FuzzConfigTOML(f *testing.F) {
+	f.Add([]byte(`key = "value"`))
+	f.Add([]byte(``))
+	f.Fuzz(func(t *testing.T, data []byte) {
+		runConfigFuzz(t, data, "toml")
+	})
+}
+
+func FuzzConfigPriority(f *testing.F) {
+	f.Add([]byte(`target_key: "file_val"`), "env_val", "def_val")
+
+	f.Fuzz(func(t *testing.T, data []byte, envVal string, defaultVal string) {
+		if strings.ContainsAny(envVal, "=\n\r\x00") {
+			return
+		}
+
+		const envKey = "VIPER_FUZZ_ENV_KEY"
+		t.Setenv(envKey, envVal)
+
+		v := New()
+		v.SetConfigType("yaml")
+		v.SetDefault("target_key", defaultVal)
+
+		if err := v.BindEnv("target_key", envKey); err != nil {
+			t.Fatal(err)
+		}
+
+		_ = v.ReadConfig(bytes.NewReader(data))
+
+		// Verify priority: Environment variables should override config and defaults
+		got := v.GetString("target_key")
+		if envVal != "" {
+			if got != envVal {
+				t.Errorf("Priority error: Env should win. got %q, want %q", got, envVal)
+			}
+		}
+
+		_ = v.GetInt("target_key")
+		_ = v.GetBool("target_key")
+		_ = v.GetStringSlice("target_key")
+	})
+}
\ No newline at end of file