Skip to content

improve woff2 fuzzing #183

@kcc

Description

@kcc

@rsheeter
Here is what needs to be done:

  1. Add yourself to https://github.com/google/oss-fuzz/blob/master/projects/woff2/project.yaml
    like this:
    primary_contact: "your-email"

  2. Move the fuzz target (https://github.com/google/oss-fuzz/blob/master/projects/woff2/convert_woff2ttf_fuzzer.cc) to the woff repository.
    Also put any other targets you want there, e.g. those from google3
    (https://cs.corp.google.com/piper///depot/google3/third_party/woff/woff2_dec_fuzzer_new_entry.cc, etc)

See more about our preferred integration here:
https://github.com/google/oss-fuzz/blob/master/docs/ideal_integration.md

  1. Modify Dockerfile and build.sh here
    to get a seed corpus somewhere from internet or from the woff2 repo.
    More info: https://github.com/google/oss-fuzz/blob/master/docs/new_project_guide.md#seed-corpus
    For woff2 this is a critical step -- IIRC the file format is pretty hard to crack w/o proper seeds.

  2. Once 1-3 are done, wait for a few days and look at clusterfuzz-external.appspot.com,
    find woff2 and see if the fuzzer has good enough coverage.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions