search

google / oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.
https://google.github.io/oss-fuzz
Apache License 2.0
10.13k stars 2.16k forks source link

Initial project skeleton for borb #12017

Open ennamarie19 opened 1 month ago

ennamarie19 commented 1 month ago

borb is a pure python library to read, write and manipulate PDF documents. It represents a PDF document as a JSON-like datastructure of nested lists, dictionaries and primitives (numbers, string, booleans, etc). It is a popular repository as it has over 3300 stars on Github. Additionally, 227 open source repositories depend on borb. It is important to fuzz this widely-used project as it deals with generating and manipulating PDF files which are often used as vehicles for embedding malicious code or exploiting PDF readers' vulnerabilities.

I received approval from the upstream's maintainer here: https://github.com/jorisschellekens/borb/issues/204

jonathanmetzman commented 1 month ago

Do you know any prominent users of Borb?

ennamarie19 commented 1 month ago

Do you know any prominent users of Borb?

pyfpdf is the most prominent user/depenedent of Borb. pyfpdf is used by over 10 thousand repositories and 3 thousand packages.