search

arrow-py / arrow

🏹 Better dates & times for Python
https://arrow.readthedocs.io
Apache License 2.0
8.63k stars 669 forks source link

Fuzzing arrow on OSS-Fuzz #1147

Closed rikfie closed 1 year ago

rikfie commented 1 year ago

Hi there,

Are you interested to get arrow fuzzed*? I have written a harness for arrow and it's ready to be integrated. Many libraries are being fuzzed on OSS-Fuzz on a daily basis and I would like to add arrow.

The only condition for fuzzing on OSS-Fuzz is that any bugs found must be fixed and released within 90 days; the bug will be publicly disclosed past this point.

If you're interested, please provide me with an e-mail address of a maintainer. The e-mail address must be linked to a Google account. Note that the addresses will be stored in a public repository. If this is not an option, I can forward bug reports to you. Although I can propose for the integration of arrow to OSS-Fuzz, the decision is up to OSS-Fuzz.

* Fuzz testing is a well-known technique for uncovering programming errors in software. OSS-Fuzz aims to make common open source software more secure and stable by combining modern fuzzing techniques with scalable, distributed execution.

krisfremen commented 1 year ago

Closing as done with https://github.com/google/oss-fuzz/pull/10100