Integration with google oss-fuzz fuzzing service

[manunio]

Hi @marcusklaas, Based on this comment: #562 (comment) if you are interested, I would like to help integrate this project into OSS-Fuzz.

• As an initial step for integration I have created this PR: pulldown-cmark: initial integration google/oss-fuzz#8624, it contains necessary logic from an OSS-Fuzz perspective to integrate pulldown-cmark.

• OSS-Fuzz is a free service run by Google that performs continuous fuzzing of important open source projects, you can find more details in our FAQ.

• If you would like to integrate, the only thing I need is a list of email(s), it must be associated with a google account like gmail (why?). by doing that, the provided email(s) will get access to the data produced by OSS-Fuzz, such as bug reports, coverage reports and more stats.

• Notice the email(s) affiliated with the project will be public in the OSS-Fuzz repo, as they will be part of a configuration file.

[manunio]

@marcusklaas Friendly Ping :)

[Martin1887]

We have some fuzzers now. The Gmail account may be a problem, how it is exactly used for authentication? This account receives many e-mails?

Thanks.

[manunio]

The Gmail account may be a problem, how it is exactly used for authentication?

A Gmail/Google Id is required to access both Google's issue tracker and the oss-fuzz web interface. This will allow you to view statistics about your fuzz targets, as well as current crashes.

While you will receive email notifications summarizing discovered crashes even without a Gmail/Google Id, access to the issue tracker and the web interface is currently restricted to users with Google accounts.

This account receives many e-mails?

You'll only receive emails for crash reports(it automatically handles de-duplication of such crashes) and occasional build failures(if any) related to your fuzz targets.

Edit:
From FAQ

Why do you require a Google account for authentication?

Our ClusterFuzz fuzzing infrastructure and issue tracker require a Google account for authentication. Note that an alternate email address associated with a Google account does not work due to appengine api limitations.

[Martin1887]

I have created the following Google account for the project: pulldowncmark@gmail.com.

Which would be the next steps?

Thanks.

[manunio]

I have created the following Google account for the project: pulldowncmark@gmail.com.

Which would be the next steps?

Thanks.

The next step would be creating a pr like google/oss-fuzz#8624 ( I would be happy to do it on your behalf), Then wait for the decision of project acceptance from the oss-fuzz team :)

[Martin1887]

OK, then please create it.

Thanks.

[manunio]

OK, then please create it.

Thanks.

Hey, just an update. I'm working on the integration side but facing some issues with the oss-fuzz. I'll update you once it's fixed.