Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Continuous fuzzing through OSS-fuzz #302

Open
AdamKorcz opened this issue Mar 29, 2021 · 0 comments
Open

Continuous fuzzing through OSS-fuzz #302

AdamKorcz opened this issue Mar 29, 2021 · 0 comments

Comments

@AdamKorcz
Copy link

AdamKorcz commented Mar 29, 2021

Hello,

I have been working on setting up continuous fuzzing for kraken through OSS-fuzz.

A draft integration application has been set up here: google/oss-fuzz#5401 including two fuzzers to get things started.

For those unfamiliar with OSS-fuzz: OSS-fuzz is a service offered by Google that provides the necessary resources and infrastructure to run fuzzers continuously for critical open source projects. If bugs are found, reports are sent out to everyone on the mailing list who can then view a more detailed report that includes stack trace and reproducer test case. The service is free and is offered with an implied expectation that bugs are fixed, so that the resources spent on fuzzing kraken go towards resolving bugs.
To finish the integration, a maintainers email address is needed on the OSS-fuzz side.

For those unfamiliar with fuzzing: Fuzzing is a way of testing software whereby pseudo-random data is passed to a target application with the goal of finding bugs and vulnerabilities. OSS-fuzz has found thousands of bugs in open source software projects including many golang projects.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant