LAME oss-fuzz integration

Guido Vranken <[email protected]> Tue, 19 Mar 2019 11:41:32 +0100
Newsgroups gmane.comp.audio.mp3.lame
Message-ID <CAO5O-EL=MGTVm0cYc55NKpbtPLbkpXdrmx7p_9D8WBrVNT+UCA@mail.gmail.com>
Dear list,

oss-fuzz is a Google initiative that performs continuous fuzz testing on
widely used open source software in pursuit of discovering software
vulnerabilities like buffer overflows.

I've written a LAME fuzzer that I can request to be merged into oss-fuzz.

Is the LAME development team interested in oss-fuzz integration?
Please see here what oss-fuzz expects from upstream developers:
https://github.com/google/oss-fuzz/blob/master/README.md
If you are keen, then for now I only need one or more developer e-mail
addresses that are linked to a Google account, and I will take care of the
integration.

On a related note, I've found a memory corruption bug with my fuzzer in the
LAME encoder. Do you prefer that I post bug details to this public list, or
should I report it to a specific address?

Thanks

Guido Vranken