search

OpenNavigationSurface / WorkingGroup

Management information for the ONS Working Group
BSD 3-Clause "New" or "Revised" License
2 stars 0 forks source link

Library fuzzing using OSS Fuzz #3

Open brian-r-calder opened 4 months ago

brian-r-calder commented 4 months ago

Background

There is a lot of code in the BAG library, and therefore a significant risk of memory holes or other security issues. This might also reflect issues in underlying libraries including HDF5. One way to find such issues is to use fuzzing techniques. The BAG library has been accepted for testing via Google OSS-Fuzz.

Actions

  1. Brief on the current setup for OSS-Fuzz testing, and opportunities.
  2. Collect concerns or other suggestions for better automated testing.