search

martinblech / xmltodict

Python module that makes working with XML feel like you are working with JSON
MIT License
5.51k stars 462 forks source link

OSS Fuzz Integration #353

Open ennamarie19 opened 2 months ago

ennamarie19 commented 2 months ago

My name is McKenna Dallmeyer and I would like to submit xmltodict to OSS-Fuzz.

If you are not familiar with the project, OSS-Fuzz is Google's platform for continuous fuzzing of Open Source Software.

In order to get the most out of this program, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you!

martinblech commented 1 month ago

Hi McKenna, sorry for the late reply. Happy to help with this, please send your PRs and I'll merge them.

ennamarie19 commented 1 month ago

No worries! Thank you for getting back to me! Do you mind sharing an email that I can submit to OSS-Fuzz? It will be used to notify you of any bugs that are uncovered during the fuzzing process.

martinblech commented 1 month ago

Sure, my email is my github username at gmail. Thanks!

ennamarie19 commented 1 month ago

Thank you!!

ennamarie19 commented 1 month ago

Darn, I just dug into this a bit more and noticed that someone has already created a fuzzer for xmltodict about 4 years ago. Were you aware of this?

https://github.com/ennamarie19/oss-fuzz/tree/master/projects/xmltodict https://github.com/martinblech/xmltodict/issues/265

martinblech commented 1 month ago

Sorry I missed this. Please let me know if you need anything from my end to unblock this.