kornelski / pngquant

Lossy PNG compressor — pngquant command based on libimagequant library
https://pngquant.org
Other
5.09k stars 476 forks source link

Added fuzzer and oss-fuzz build script #371

Closed AdamKorcz closed 3 years ago

AdamKorcz commented 3 years ago

I have been working on setting up continuous fuzzing of pngquant by way of Libfuzzer and OSS-fuzz.

I have written a simple fuzzer and set up a draft integration of pngquant at OSS-fuzz: https://github.com/google/oss-fuzz/pull/5078

OSS-fuzz is a free service by Google for open source projects, and upon integration all added fuzzers will be run through regular scheduled jobs and maintainers will be notified if any bugs are found. Notifications happen through email and include link to detailed bug reports containing a stack trace and reproducible test case.

In the draft integration at OSS-fuzz you can see that all tests complete successfully. In this PR I am moving over the fuzzer and the build script to make it easier to add more fuzzers or make modifications to the existing one.

To complete the integration, a maintainers email address is needed in the project.yaml on the OSS-fuzz side.

kornelski commented 3 years ago

Thank you