LAME oss-fuzz integration
Guido Vranken <[email protected]> Tue, 19 Mar 2019 11:41:32 +0100
| Newsgroups | gmane.comp.audio.mp3.lame |
|---|---|
| Message-ID | <CAO5O-EL=MGTVm0cYc55NKpbtPLbkpXdrmx7p_9D8WBrVNT+UCA@mail.gmail.com> |
Dear list, oss-fuzz is a Google initiative that performs continuous fuzz testing on widely used open source software in pursuit of discovering software vulnerabilities like buffer overflows. I've written a LAME fuzzer that I can request to be merged into oss-fuzz. Is the LAME development team interested in oss-fuzz integration? Please see here what oss-fuzz expects from upstream developers: https://github.com/google/oss-fuzz/blob/master/README.md If you are keen, then for now I only need one or more developer e-mail addresses that are linked to a Google account, and I will take care of the integration. On a related note, I've found a memory corruption bug with my fuzzer in the LAME encoder. Do you prefer that I post bug details to this public list, or should I report it to a specific address? Thanks Guido Vranken