antlr / antlr4

ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
http://antlr.org
BSD 3-Clause "New" or "Revised" License
17.12k stars 3.28k forks source link

Continuous fuzzing integration by way of OSS-Fuzz #3143

Open DavidKorczynski opened 3 years ago

DavidKorczynski commented 3 years ago

Hello all,

I have set up continuous fuzzing of antlr4 by way of the free OSS-Fuzz service. The benefits of fuzzing is that it can stress test the antlr4 cpp runtime and analyse it for vulnerabilities and bugs. The benefits of doing this continuously is that the fuzzer will be run on a regular basis and bug reports will be send to your email with information such as inputs that trigger the bugs, stack traces and more. Is this something you would be happy to have set up? If so, could you please leave an email in the OSS-Fuzz PR here: https://github.com/google/oss-fuzz/pull/5555 that will receive the bugs reports - notice this email should be attached to a Google account for you to see the reports.

parrt commented 2 years ago

Hi, do you mean make a comment on that PR or fork and make my own PR to update it?