google / oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.
https://google.github.io/oss-fuzz
Apache License 2.0
10.13k stars 2.16k forks source link

[cups] Migrate harness to upstream OpenPrinting project #12036

Closed fish98 closed 3 weeks ago

fish98 commented 4 weeks ago

The OpenPrinting project under the Linux Foundation has initiated the OpenPrinting fuzzing repository to officially maintain OSS-Fuzz testing tasks. This PR includes following updates:

  1. Migration of the existing CUPS fuzzing harness to the upstream OpenPrinting/fuzzing project.
  2. Updated of CUPS mailing contact list and configuration setting.

All harness building related changes has been locally tested and verified.

We deeply appreciate the contributions from @pkillarjun for his initial integration of the CUPS project into OSS-Fuzz and his support during this migration. However, OpenPrinting has decided to move the corpus, fuzzing harnesses, and build scripts into the repository under its organisation and maintainance. In addition, the bug reports will be firstly processed by OpenPrinting's security team and not by the initial contributor, who is not part of the organisation. These two measures will minimise the security risks and still maintaining the ability of open source fellows to participate in the development.

CC @tillkamppeter @iosifache

github-actions[bot] commented 4 weeks ago

fish98 is a new contributor to projects/cups. The PR must be approved by known contributors before it can be merged. The past contributors are: pkillarjun, 0x34d

pkillarjun commented 4 weeks ago

However, OpenPrinting has decided to move the corpus, fuzzing harnesses, and build scripts into the repository under its organisation and maintainance. In addition, the bug reports will be firstly processed by OpenPrinting's security team and not by the initial contributor

Initial contributors are for build fixes, updating harness, and adding new targets. I'm totally cool with this update.

iosifache commented 4 weeks ago

Thanks for understanding, @pkillarjun 🙏🏻! We hope to see PRs from you in the new repository!

pkillarjun commented 4 weeks ago

We hope to see PRs from you in the new repository.

I will try. I think it would be better for me to revisit when you fellows are done.