Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integration of servo-core into OSS-Fuzz #475

Closed
onionpsy opened this issue May 3, 2022 · 1 comment
Closed

Integration of servo-core into OSS-Fuzz #475

onionpsy opened this issue May 3, 2022 · 1 comment

Comments

@onionpsy
Copy link

onionpsy commented May 3, 2022

Hi all,

I have prepared the initial integration CodeIntelligenceTesting/oss-fuzz@4ae2d29 of servo-core into google oss-fuzz. This will enable continuous fuzzing of this project, which will be conducted by Google. Bugs that will be found by fuzzing will be reported to you. After the initial integration of this project into oss-fuzz, I will continue to add additional fuzz tests to improve the code coverage over time.

The integration requires a primary contact, someone to deal with the bug reports submitted by oss-fuzz. The email address needs to belong to an established project committer and be associated with a Google account as per here. When a bug is found, you will receive an email that will provide you with access to ClusterFuzz, crash reports, and fuzzer statistics. More than 1 person can be included. Please let me know who I should include, if anyone.

Jazzer is used for fuzzing Java applications. Jazzer is a coverage-guided, in-process fuzzer for the JVM platform developed by Code Intelligence. It is based on libFuzzer and brings many of its instrumentation-powered mutation features to the JVM. Jazzer has already found several bugs in JVM applications: Jazzer Findings

Please let me know if you have any questions regarding fuzzing or the oss-fuzz integration.

@brharrington
Copy link
Contributor

Thanks, but given that this project is deprecated, we are unlikely to invest in fixing bugs found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants