OpenPrinting / OpenPrinting/fuzzing

Memory leak in cups `fuzz_ppd` harness

Open
#7 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug good first issue
Dominant language
C
Stars
8
Forks
18
Avg merge
7h 37m
Merged PRs (30d)
1

Description

As mentioned in the latest pull request regarding fuzz_ppd. The current implementation of this harness contains some unhandled variable issues, e.g., ppdsize and cups_options are not properly freed when execution terminates via a return 0 condition during fuzzing.

While the overall functionality of the harness is correct, a reconstruction of this harness is required to ensure proper memory management. So that OSS-Fuzz can focus on identifying real bugs rather than surfacing false positives, which should be addressed before enabling this harness into the OSS-Fuzz fuzzing process.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the fuzz_ppd harness and the latest pull request linked in the issue, focusing on the ppdsize and cups_options cleanup paths around return 0. Done means the harness handles those allocations safely during termination and is ready for OSS-Fuzz without memory-management false positives.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
testing-qa
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.