Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integration with oss-fuzz fuzzing service #334

Open
manunio opened this issue Sep 30, 2022 · 5 comments
Open

Integration with oss-fuzz fuzzing service #334

manunio opened this issue Sep 30, 2022 · 5 comments

Comments

@manunio
Copy link

manunio commented Sep 30, 2022

Hi @m4b, I would like to help integrate this project into OSS-Fuzz.

  • As an initial step for integration I have created this PR: goblin: initial integration google/oss-fuzz#8646, it contains necessary logic from an OSS-Fuzz perspective to integrate goblin.

  • OSS-Fuzz is a free service run by Google that performs continuous fuzzing of important open source projects.

  • As goblin already have cargo-fuzz based fuzzing implemented, this makes it easily compatible with oss-fuzz out of box.

  • If you would like to integrate, the only thing I need is a list of email(s), it must be associated with a google account like
    gmail (why?). by doing that, the provided email(s) will get access to the data produced by OSS-Fuzz, such as bug reports, coverage reports and more stats.

- As an alternative, if you don't have a google/gmail id, but still wish to integrate. I can add my mail id for time being and monitor bug/crashes.

  • Notice the email(s) affiliated with the project will be public in the OSS-Fuzz repo, as they will be part of a configuration file.
@m4b
Copy link
Owner

m4b commented Oct 24, 2022

hi @manunio i would prefer not to sign up my email for this service, but if you feel like it and don't mind it, I don't see a problem with you signing up and either opening issues you find here or perhaps sending me an email if something serious is discovered :)

@manunio
Copy link
Author

manunio commented Oct 24, 2022

hi @manunio i would prefer not to sign up my email for this service, but if you feel like it and don't mind it, I don't see a problem with you signing up and either opening issues you find here or perhaps sending me an email if something serious is discovered :)

Hi thanks for your response, I don't mind doing that :)

@manunio
Copy link
Author

manunio commented Dec 22, 2022

hi @manunio i would prefer not to sign up my email for this service, but if you feel like it and don't mind it, I don't see a problem with you signing up and either opening issues you find here or perhaps sending me an email if something serious is discovered :)

Hi @m4b an email is needed for this project to be accepted by oss-fuzz team, sorry for the confusion.

@m4b
Copy link
Owner

m4b commented Jan 1, 2023

@manunio i thought we agreed your email is sufficient? Or they specifically need my email?

@manunio
Copy link
Author

manunio commented Jan 2, 2023

@manunio i thought we agreed your email is sufficient? Or they specifically need my email?

Yes they specially need your email, as this guarantees someone from the project team is receiving security/bug reports, Sorry for the confusion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants