Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Continuous fuzzing by way of OSS-Fuzz #183

Open
DavidKorczynski opened this issue Jan 18, 2021 · 5 comments
Open

Continuous fuzzing by way of OSS-Fuzz #183

DavidKorczynski opened this issue Jan 18, 2021 · 5 comments

Comments

@DavidKorczynski
Copy link
Contributor

Hi,

I was thinking that it would be nice to set up continuous fuzzing of httplib2, by way of OSS-Fuzz. In this PR: google/oss-fuzz#5000 I have done exactly that, namely created the necessary logic from an OSS-Fuzz perspective to integrate httplib2. This includes developing initial fuzzers as well as integrating into OSS-Fuzz.

Essentially, OSS-Fuzz is a free service run by Google that performs continuous fuzzing of important open source projects. The only expectation of integrating into OSS-Fuzz is that bugs will be fixed. This is not a "hard" requirement in that no one enforces this and the main point is if bugs are not fixed then it is a waste of resources to run the fuzzers, which we would like to avoid.

If you would like to integrate, could I please have an email(s) that will get access to the data produced by OSS-Fuzz, such as bug reports, coverage reports and more stats. Notice the emails affiliated with the project will be public in the OSS-Fuzz repo, as they will be part of a configuration file.

@temoto
Copy link
Member

temoto commented Jan 19, 2021

Thank you. I like fuzzing. I hope we can ship fuzz_*.py files as part of httplib2 source, so changing them doesn't involve external merge process and also to run local fuzzing.

@cdent @dims ping

@DavidKorczynski
Copy link
Contributor Author

Great @temoto - I can submit the fuzzer to this repository now, and then we can ship all of the fuzzers here and keep the OSS-Fuzz repository clean. How does that sound?

@temoto
Copy link
Member

temoto commented Jan 19, 2021

Great @temoto - I can submit the fuzzer to this repository now, and then we can ship all of the fuzzers here and keep the OSS-Fuzz repository clean. How does that sound?

superb

@temoto
Copy link
Member

temoto commented Jan 19, 2021

tests/fuzz_*.py should be fine, try script/test and see if pytest is happy with that

@DavidKorczynski
Copy link
Contributor Author

Submitted the PR #184

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants