Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fuzz: initial integration #117

Merged
merged 3 commits into from
Mar 15, 2024
Merged

Conversation

manunio
Copy link
Contributor

@manunio manunio commented Feb 19, 2024

This pr adds few initial fuzz_targets for oss-fuzz integration.
See #48 for more details.

@manunio manunio marked this pull request as draft February 19, 2024 11:34
@manunio
Copy link
Contributor Author

manunio commented Feb 29, 2024

@Kludex ping :)

@Kludex
Copy link
Owner

Kludex commented Feb 29, 2024

@manunio pong :)

@manunio
Copy link
Contributor Author

manunio commented Mar 11, 2024

Hey @Kludex, I hope this message finds you well. Would you be available to take a look at this PR whenever you have a moment?

Once this PR is merged and I have your email address, I can then reach out to the OSS-Fuzz team to inquire about their decision on this project's acceptance.

Thanks :)

@Kludex
Copy link
Owner

Kludex commented Mar 15, 2024

atheris doesn't support Python 3.12?

@manunio
Copy link
Contributor Author

manunio commented Mar 15, 2024

atheris doesn't support Python 3.12?

According to their readme

Atheris supports Linux (32- and 64-bit) and Mac OS X, Python versions 3.6-3.10.

it only supports 3.6-3.10, while they are testing it against 3.11 in their CI, there is no support for 3.12 yet.

@Kludex
Copy link
Owner

Kludex commented Mar 15, 2024

Wanna wait for support, or don't run the fuzz on 3.12?

@manunio
Copy link
Contributor Author

manunio commented Mar 15, 2024

Wanna wait for support, or don't run the fuzz on 3.12?

I think it's better to not run it on 3.12, Will you be okay with skipping atheris installation for 3.12?

@Kludex
Copy link
Owner

Kludex commented Mar 15, 2024

yes

@manunio
Copy link
Contributor Author

manunio commented Mar 15, 2024

yes

Done :)

.github/workflows/main.yml Outdated Show resolved Hide resolved
@Kludex Kludex merged commit 29829f7 into Kludex:master Mar 15, 2024
6 checks passed
@Kludex
Copy link
Owner

Kludex commented Mar 15, 2024

Thanks 👍

@manunio
Copy link
Contributor Author

manunio commented Mar 15, 2024

Thanks 👍

Should I use your Gmail id for oss-fuzz integration?

@manunio manunio deleted the fuzz-initial-integration branch March 15, 2024 12:07
@Kludex
Copy link
Owner

Kludex commented Mar 15, 2024

Yes, please. 👍

DonggeLiu pushed a commit to google/oss-fuzz that referenced this pull request Mar 26, 2024
Hi, [python-multipart](https://github.com/Kludex/python-multipart/) is a
streaming multipart parser for Python.
It has 8 million+ monthly downloads as per
[pypistats](https://pypistats.org/packages/python-multipart), and is
being used by projects like
- [fastapi](https://github.com/tiangolo/fastapi) (`68.3k stars on
github`)
- [starlette](https://github.com/encode/starlette) (`9.2k stars on
github`)

ref: Kludex/python-multipart#117
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants