OSTIP must cleanup mess created by Leviathan Security in UPX
- Dominant language
- Shell
- Stars
- 12.6k
- Forks
- 2.9k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 61
Description
https://issues.oss-fuzz.com/42533060 upx: Fuzzing build failure
The build has been failing for at least 9 months because of a stale patch
in the build system for testing UPX
that was necessary ten months ago (January 2024) but was obviated
by changes to the UPX source by the developers of UPX.
When the contract ended between OSTIP and Leviathan Security
for exercising UPX using the cluster-fuzz apparatus,
then Leviathan did not remove the then-stale patch,
and the developers of UPX have no access to remove the patch.
Worse still, the GitHub commit of the patch (and the URL
of the cluster-fuzz [sub-]project for UPX) are not listed in the build log.
PLEASE remove the patch, or provide the URL and access permissions
so that UPX developers can do so. Reminders by a robot build system
that has no human oversight are annoying, and have created the
strong impression that OSTIP (Open Source Technology Improvement Program)
is merely a pest.
Contributor guide
Assessment
This issue has not been assessed yet.