Continuous fuzzing by way of OSS-Fuzz

Hi,

I was wondering if you would like to integrate continuous fuzzing by way of OSS-Fuzz? Fuzzing is a way to automate test-case generation and has been heavily used for memory unsafe languages. Recently efforts have been put into fuzzing memory safe languages and Python is one of the languages that has recently gotten better tool support. Fuzzing Python aims to primarily find uncaught exception bugs at the moment, and in the future hopefully more security-aware bug oracles will be used as well.

In this https://github.com/google/oss-fuzz/pull/7921 we did an initial integration into OSS-Fuzz. OSS-Fuzz is a free service run by Google that performs continuous fuzzing of important open source projects. If you would like to integrate, the only thing I need is a list of email(s) that will get access to the data produced by OSS-Fuzz, such as bug reports, coverage reports and more stats. Notice the emails affiliated with the project will be public in the OSS-Fuzz repo, as they will be part of a configuration file.

Start by reviewing the OSS-Fuzz integration proposal and the referenced OSS-Fuzz pull request #7921; no repository file or test is named. Confirm whether gunicorn wants continuous fuzzing and which project emails may be publicly listed, with completion meaning that maintainers provide approved contacts or decide not to proceed.

Written by the indexing model from the issue text.