https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43743

--===============8093088860061969610==
Content-Type: multipart/alternative; boundary="000000000000b0edfb05e236db51"

--000000000000b0edfb05e236db51
Content-Type: text/plain; charset="UTF-8"

did anyone report
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43743 to libxml2
directly?

i work on Android and was asked about this bug recently, and will try to
improve the channel for reporting fuzzer-found libxml2 bugs like this going
forward, but for now (since the secrecy deadline on that one has expired
anyway), i can at least point you in that direction.

sadly, it looks like there are actually a bunch of fuzzer-found bugs that
may never have been reported upstream? (i haven't checked; i'm just
guessing.) see
https://bugs.chromium.org/p/oss-fuzz/issues/list?q=libxml2&can=2 for
example.

i assume you've seen these kinds of bugs before, but let me know if you
have trouble with the reproducers  ... not that i can ever remember how to
do it myself, but i can find someone who definitely does know :-)

--000000000000b0edfb05e236db51
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">did anyone report=C2=A0<a href=3D"https://bugs.chromium.or=
g/p/oss-fuzz/issues/detail?id=3D43743">https://bugs.chromium.org/p/oss-fuzz=
/issues/detail?id=3D43743</a> to libxml2 directly?<div><br></div><div>i wor=
k on Android and was asked about this bug recently, and will try to improve=
 the channel for reporting fuzzer-found libxml2 bugs like this going forwar=
d, but for now (since the secrecy deadline on that one has expired anyway),=
 i can at least point you in that direction.</div><div><br></div><div>sadly=
, it looks like there are actually a bunch of fuzzer-found bugs that may ne=
ver have been reported upstream? (i haven&#39;t checked; i&#39;m just guess=
ing.) see=C2=A0<a href=3D"https://bugs.chromium.org/p/oss-fuzz/issues/list?=
q=3Dlibxml2&amp;can=3D2">https://bugs.chromium.org/p/oss-fuzz/issues/list?q=
=3Dlibxml2&amp;can=3D2</a> for example.</div><div><br></div><div>i assume y=
ou&#39;ve seen these kinds of bugs before, but let me know if you have trou=
ble with the reproducers=C2=A0 ... not that i can ever remember how to do i=
t myself, but i can find someone who definitely does know :-)=C2=A0</div></=
div>

--000000000000b0edfb05e236db51--

--===============8093088860061969610==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
xml mailing list, project page  http://xmlsoft.org/
[email protected]
https://mail.gnome.org/mailman/listinfo/xml

--===============8093088860061969610==--