Re: Fuzzing integration with oss-fuzz

2021-07-27 Thread david korczynski
The OSS-Fuzz PR is now ready and should be merged in soon https://github.com/google/oss-fuzz/pull/6044 Following this I will look to put more efforts into it to get better coverage. If anyone wants their email attached to the project as well to see bug reports then please let me know and I

Re: Fuzzing integration with oss-fuzz

2021-07-27 Thread Ben Laurie
On Tue, 27 Jul 2021 at 18:12, Paul Querna wrote: > Years ago I started hacking on an "mpm fuzz": > https://github.com/pquerna/httpd/compare/trunk...pquerna:mpm_fuzz > > The idea was to make a "fake" MPM, which could feed data from AFL directly > into the network filter stack, in a super

Re: Fuzzing integration with oss-fuzz

2021-07-27 Thread Paul Querna
Years ago I started hacking on an "mpm fuzz": https://github.com/pquerna/httpd/compare/trunk...pquerna:mpm_fuzz The idea was to make a "fake" MPM, which could feed data from AFL directly into the network filter stack, in a super efficient way. I don't know if it is really a great idea, since TLS

Re: Fuzzing integration with oss-fuzz

2021-07-27 Thread Stefan Eissing
Sure! > Am 26.07.2021 um 15:03 schrieb david korczynski : > > Eric and Stefan, are you okay with me proceeding with the fuzzing > integration (https://github.com/google/oss-fuzz/pull/6044) and putting > your emails in as recipients of bug reports? I will also put my own > email in and we can add

Re: Fuzzing integration with oss-fuzz

2021-07-27 Thread Eric Covener
works for me On Mon, Jul 26, 2021 at 9:04 AM david korczynski wrote: > > Eric and Stefan, are you okay with me proceeding with the fuzzing > integration (https://github.com/google/oss-fuzz/pull/6044) and putting > your emails in as recipients of bug reports? I will also put my own > email in and

Re: Fuzzing integration with oss-fuzz

2021-07-27 Thread Yann Ylavic
Hi David, Please subscribe me too. Regards; Yann. On Monday, July 26, 2021, david korczynski wrote: > Eric and Stefan, are you okay with me proceeding with the fuzzing > integration (https://github.com/google/oss-fuzz/pull/6044) and putting > your emails in as recipients of bug reports? I

Re: Fuzzing integration with oss-fuzz

2021-07-26 Thread david korczynski
Eric and Stefan, are you okay with me proceeding with the fuzzing integration (https://github.com/google/oss-fuzz/pull/6044) and putting your emails in as recipients of bug reports? I will also put my own email in and we can add more contacts at any point too. We could then get the fuzzing

Re: Fuzzing integration with oss-fuzz

2021-07-19 Thread david korczynski
I am happy to put in efforts in getting the coverage up. If I do not succeed in getting coverage up to a decent amount then I am okay with that personally. On 19/07/2021 15:27, Eric Covener wrote: I am in favour of getting our server into a regular fuzzing setup and would subscribe to such

Re: Fuzzing integration with oss-fuzz

2021-07-19 Thread Eric Covener
> I am in favour of getting our server into a regular fuzzing setup > and would subscribe to such reports with my google mail. Thanks for > bringing this to the team and your efforts. > > Perhaps other people here can voice their opinion as well? It would > not work as well, if I am the only one

Re: Fuzzing integration with oss-fuzz

2021-07-19 Thread Stefan Eissing
David, > Am 16.07.2021 um 12:57 schrieb david korczynski : > > Hi all, > > I have been working on getting fuzzing into Apache httpd and it would be > great to have it set up with OSS-Fuzz. OSS-Fuzz is a free service run by > Google that will continuously run fuzzers and the service is >

Fuzzing integration with oss-fuzz

2021-07-16 Thread david korczynski
Hi all, I have been working on getting fuzzing into Apache httpd and it would be great to have it set up with OSS-Fuzz. OSS-Fuzz is a free service run by Google that will continuously run fuzzers and the service is administrered on github (https://github.com/google/oss-fuzz). Apache-commons is