cncf / cncf/cncf-fuzzing

conmon fuzz target

Open
#233 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
133
Forks
53
PR merge metrics
No merged PRs in 30d

Description

I ran into https://github.com/containers/conmon/issues/315#issuecomment-1296141621 the other day and then I found https://ostif.org/wp-content/uploads/2022/06/CRI-O-audit-by-ada-logics-chainguard-ostif.pdf where scenarios like that were included in the threat model
> ... and
input from the container’s are also handled in Conmon. These are areas of potential attack
surface against Conmon.

and as far as I understand there should be a fuzz target:
> We also developed a fuzzer for Conmon to analyse the logging and parsing routines in conmon/src/ctr_logging.c.

@DavidKorczynski I can't seem to find that fuzz target anywhere. Is there any chance you could point me in the right direction?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.