David, > Am 16.07.2021 um 12:57 schrieb david korczynski <[email protected]>: > > Hi all, > > I have been working on getting fuzzing into Apache httpd and it would be > great to have it set up with OSS-Fuzz. OSS-Fuzz is a free service run by > Google that will continuously run fuzzers and the service is > administrered on github (https://github.com/google/oss-fuzz). > Apache-commons is already integrated into OSS-Fuzz (see here: > https://github.com/google/oss-fuzz/pull/5633) > > I have done initial work on fuzzing httpd which can be found in this PR: > https://github.com/google/oss-fuzz/pull/6044 > > I am happy to continue working more on improving the fuzzing so we can > get a high code coverage of httpd, but I would prefer to do this only if > the developers of httpd are happy to receive bug reports from the > fuzzers. In order to integrate with OSS-Fuzz the only thing needed is a > set of email addresses that will receive the bug reports, and these > emails need to be affiliated with a Google account (for login purposes). > > Let me know if you are happy to integrate httpd into OSS-Fuzz.
I am in favour of getting our server into a regular fuzzing setup and would subscribe to such reports with my google mail. Thanks for bringing this to the team and your efforts. Perhaps other people here can voice their opinion as well? It would not work as well, if I am the only one willing to listen to findings. Cheers, Stefan > Kind regards, > David > > ADA Logics Ltd is registered in England. No: 11624074. > Registered office: 266 Banbury Road, Post Box 292, > OX2 7DL, Oxford, Oxfordshire , United Kingdom
