Skip to content

Please review proposed OSS-Fuzz integration #5154

@rootvector2

Description

@rootvector2

Hi Undici maintainers,

I opened an OSS-Fuzz PR to add an initial fuzzing integration for Undici:

google/oss-fuzz#15453

The integration currently adds Jazzer.js fuzz targets for:

  • Headers, Request, and Response construction/header handling
  • undici.request using MockAgent, with network access disabled
  • fetch with FormData using a mocked response

Could someone from the Undici/Node.js maintainer side please take a look at the OSS-Fuzz PR and confirm two things?

  1. Whether security@nodejs.org is the right primary_contact for this OSS-Fuzz project, or whether another Google-account-backed maintainer/project email should be used.
  2. If the integration looks okay from the project side, could you please leave an LGTM/comment on the OSS-Fuzz PR? OSS-Fuzz usually wants maintainer approval before accepting a new project integration.

One implementation note: the PR is pinned to the v6.x branch for now because current Undici releases require a newer Node.js runtime than the OSS-Fuzz JavaScript base image currently provides.

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions