google / oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.
https://google.github.io/oss-fuzz
Apache License 2.0
10.13k stars 2.15k forks source link

[scapy] build it more often #12074

Closed evverx closed 2 weeks ago

evverx commented 2 weeks ago

to let the latest builds be more or less in sync with the upstream repository. It should help CIFuzz to detect known issues better among other things.

github-actions[bot] commented 2 weeks ago

evverx has previously contributed to projects/scapy. The previous PR was #12050

jonathanmetzman commented 2 weeks ago

It should help CIFuzz to detect known issues better among other things.

I'm not exactly sure this is the case.

evverx commented 2 weeks ago

For example in https://github.com/systemd/systemd/pull/25537 the fuzz target failed on CIFuzz and it was decided to merge it and fix the issues later. Until it reached OSS-Fuzz CIFuzz annoyed contributors because their PRs had nothing to do with CIFuzz failures :-) Ideally OSS-Fuzz should be in sync with repositories. The second option is to reduce the window by building stuff more frequently.