<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - poppler: oss-fuzz integration"
href="https://bugs.freedesktop.org/show_bug.cgi?id=106554">106554</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>poppler: oss-fuzz integration
</td>
</tr>
<tr>
<th>Product</th>
<td>poppler
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Other
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>general
</td>
</tr>
<tr>
<th>Assignee</th>
<td>poppler-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>pdknsk@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>Created <span class=""><a href="attachment.cgi?id=139615" name="attach_139615" title="cpp">attachment 139615</a> <a href="attachment.cgi?id=139615&action=edit" title="cpp">[details]</a></span>
cpp
I'm interested if you're interested in having poppler integrated into oss-fuzz.
In case you're not familiar with it, it's a Google-sponsored project for
continuous fuzzing of OSS.
<a href="https://github.com/google/oss-fuzz">https://github.com/google/oss-fuzz</a>
You may have noticed that I reported a few bugs recently, which were found in
preparation for possible oss-fuzz integration.
You don't really have to do anything, other than give an email address (or
multiple) with are then CC'd to bug reports found by the fuzzing system. (Only
project owners can be CC'd.)
oss-fuzz reports the bugs on its own bug tracker, rather than the project's bug
tracker. When a bug is fixed, oss-fuzz detects this automatically and closes
the bug report.
<a href="https://bugs.chromium.org/p/oss-fuzz/issues/list">https://bugs.chromium.org/p/oss-fuzz/issues/list</a>
Possible optional future steps would be to host the fuzz target directly in the
poppler repo (so that you can modify it yourself directly, rather than
submitting PRs through GitHub). Or the addition of more fuzz targets. I only
went with the cpp API so far, as it seems the easiest to integrate.
A fuzz target is just a single source file. As an example, I'm attaching the
fuzz target for the cpp API I've been using.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>