curl / curl-fuzzer

Quality assurance testing for the curl project
MIT License
82 stars 29 forks source link

Up-to-date corpus from OSS-Fuzz #56

Closed z2-2z closed 1 year ago

z2-2z commented 1 year ago

Would it be possible to merge the current corpus from OSS-fuzz into this repository?

The last time this was requested was over two years ago in #34 and it would be nice to reflect the newest versions.

bagder commented 1 year ago

/cc @cmeister2 what do you say?

cmeister2 commented 1 year ago

I'm pretty sure oss-fuzz now provide a downloadable corpus without us needing to provide all the files (which would be great if true). I need to read the docs again...

z2-2z commented 1 year ago

In the docs it says

To get access to a project's corpora, you must be listed as the primary contact or as an auto cc in the project's project.yaml file

(source)

cmeister2 commented 1 year ago

Looks like all the (public) corpuses are available at https://storage.googleapis.com/curl-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/curl_fuzzer_http/public.zip <replace curl_fuzzer_http for whichever fuzzer you want to run>. Least, this is what the CI uses to run.

On Tue, 5 Jul 2022 at 16:06, z2_ @.***> wrote:

In the docs it says

To get access to a project's corpora, you must be listed as the primary contact or as an auto cc in the project's project.yaml file

— Reply to this email directly, view it on GitHub https://github.com/curl/curl-fuzzer/issues/56#issuecomment-1175170246, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAPA36NXRA5E57PQP62URD3VSRFPLANCNFSM52WKVDQQ . You are receiving this because you were mentioned.Message ID: @.***>

z2-2z commented 1 year ago

Thanks a lot!