Hi all, I have been working on getting fuzzing into Apache httpd and it would be great to have it set up with OSS-Fuzz. OSS-Fuzz is a free service run by Google that will continuously run fuzzers and the service is administrered on github (https://github.com/google/oss-fuzz). Apache-commons is already integrated into OSS-Fuzz (see here: https://github.com/google/oss-fuzz/pull/5633)
I have done initial work on fuzzing httpd which can be found in this PR: https://github.com/google/oss-fuzz/pull/6044 I am happy to continue working more on improving the fuzzing so we can get a high code coverage of httpd, but I would prefer to do this only if the developers of httpd are happy to receive bug reports from the fuzzers. In order to integrate with OSS-Fuzz the only thing needed is a set of email addresses that will receive the bug reports, and these emails need to be affiliated with a Google account (for login purposes). Let me know if you are happy to integrate httpd into OSS-Fuzz. Kind regards, David ADA Logics Ltd is registered in England. No: 11624074. Registered office: 266 Banbury Road, Post Box 292, OX2 7DL, Oxford, Oxfordshire , United Kingdom