Hi all,
I have been working on getting fuzzing into Apache httpd and it would be
great to have it set up with OSS-Fuzz. OSS-Fuzz is a free service run by
Google that will continuously run fuzzers and the service is
administrered on github (https://github.com/google/oss-fuzz).
Apache-commons is already integrated into OSS-Fuzz (see here:
https://github.com/google/oss-fuzz/pull/5633)
I have done initial work on fuzzing httpd which can be found in this PR:
https://github.com/google/oss-fuzz/pull/6044
I am happy to continue working more on improving the fuzzing so we can
get a high code coverage of httpd, but I would prefer to do this only if
the developers of httpd are happy to receive bug reports from the
fuzzers. In order to integrate with OSS-Fuzz the only thing needed is a
set of email addresses that will receive the bug reports, and these
emails need to be affiliated with a Google account (for login purposes).
Let me know if you are happy to integrate httpd into OSS-Fuzz.
Kind regards,
David
ADA Logics Ltd is registered in England. No: 11624074.
Registered office: 266 Banbury Road, Post Box 292,
OX2 7DL, Oxford, Oxfordshire , United Kingdom
I have been working on getting fuzzing into Apache httpd and it would be
great to have it set up with OSS-Fuzz. OSS-Fuzz is a free service run by
Google that will continuously run fuzzers and the service is
administrered on github (https://github.com/google/oss-fuzz).
Apache-commons is already integrated into OSS-Fuzz (see here:
https://github.com/google/oss-fuzz/pull/5633)
I have done initial work on fuzzing httpd which can be found in this PR:
https://github.com/google/oss-fuzz/pull/6044
I am happy to continue working more on improving the fuzzing so we can
get a high code coverage of httpd, but I would prefer to do this only if
the developers of httpd are happy to receive bug reports from the
fuzzers. In order to integrate with OSS-Fuzz the only thing needed is a
set of email addresses that will receive the bug reports, and these
emails need to be affiliated with a Google account (for login purposes).
Let me know if you are happy to integrate httpd into OSS-Fuzz.
Kind regards,
David
ADA Logics Ltd is registered in England. No: 11624074.
Registered office: 266 Banbury Road, Post Box 292,
OX2 7DL, Oxford, Oxfordshire , United Kingdom