On Thu, Sep 10, 2009 at 15:54, Chris Evans <cev...@chromium.org> wrote:

> Sounds like a moderate amount of work. IMHO, it would be acceptable from a
> security standpoint to:
>
> 1) Fix any bugs turned up by fuzzing.
>

Even then, I'd need some way to verify the validity of the fixes. Mozilla
has some test data at
http://mxr.mozilla.org/mozilla-central/source/netwerk/streamconv/converters/parse-ftp/but
I'm not sure if it's complete, and it would be nice to test with real
servers anyway.

--~--~---------~--~----~------------~-------~--~----~
Chromium Developers mailing list: chromium-dev@googlegroups.com 
View archives, change email options, or unsubscribe: 
    http://groups.google.com/group/chromium-dev
-~----------~----~----~----~------~----~------~--~---

Reply via email to