conmon fuzz target
- Dominant language
- Go
- Stars
- 133
- Forks
- 53
- PR merge metrics
- No merged PRs in 30d
Description
I ran into https://github.com/containers/conmon/issues/315#issuecomment-1296141621 the other day and then I found https://ostif.org/wp-content/uploads/2022/06/CRI-O-audit-by-ada-logics-chainguard-ostif.pdf where scenarios like that were included in the threat model
> ... and
input from the container’s are also handled in Conmon. These are areas of potential attack
surface against Conmon.
and as far as I understand there should be a fuzz target:
> We also developed a fuzzer for Conmon to analyse the logging and parsing routines in conmon/src/ctr_logging.c.
@DavidKorczynski I can't seem to find that fuzz target anywhere. Is there any chance you could point me in the right direction?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.