I've been working on fuzzing libgit2, and would like to submit an integration to Google's oss-fuzz. Would there be interest in this from the project maintainers?
I've already found a number of issues, with more to come:
If submitted and accepted, Google would continually fuzz libgit2 using libfuzzer, and report issues to the libgit2 maintainers. You can read more about the process in oss-fuzz's docs
If there's interest on your part, I'll submit an integration to oss-fuzz for review over there. Is there a mailing list address I should attach to the submission that will receive crash reports from the fuzzer?
I've been working on fuzzing libgit2, and would like to submit an integration to Google's oss-fuzz. Would there be interest in this from the project maintainers?
I've already found a number of issues, with more to come:
If submitted and accepted, Google would continually fuzz libgit2 using libfuzzer, and report issues to the libgit2 maintainers. You can read more about the process in oss-fuzz's docs
If there's interest on your part, I'll submit an integration to oss-fuzz for review over there. Is there a mailing list address I should attach to the submission that will receive crash reports from the fuzzer?