Continuous fuzzing through OSS-fuzz

Open
#1,175 6 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
30/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Stale
Tech stack
go
Domain
testing-qa

Research direction

Start by reviewing the OSS-Fuzz integration pull request linked in the issue and the remaining application requirements. Confirm the maintainer email needed for bug reports; the integration is done when OSS-Fuzz can run continuous fuzzing for Ignition with a maintainer contact configured.

Written by the indexing model from the issue text.

Description

area/developer tooling kind/enhancement

Feature Request

Desired Feature

Continuous fuzzing

I have been working on setting up continuous fuzzing of ignition through OSS-fuzz here: https://github.com/google/oss-fuzz/pull/5368

For those unfamiliar: Fuzzing is a way of testing applications whereby pseudo-random data is passed to a program with the goal of finding bugs and vulnerabilities. It has been effective in finding bugs in many open source projects.
Google's OSS-fuzz project offers free CPU-power and infrastructure for critical open source projects to run their fuzzers continuously. I have written an article here about an example of why it is important to run your fuzzers continuously: https://adalogics.com/blog/the-importance-of-continuity-in-fuzzing-cve-2020-28362

All that is needed to finish the integration application of ignition is at least one maintainers email address for bug reports.

Dominant language
Go
Stars
974
Forks
296
Avg merge
6d 14h
Merged PRs (30d)
9

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from coreos/ignition

All issues in coreos/ignition

Similar issues

More Go issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.