michaelrsweet / mxml

Tiny XML library.
https://www.msweet.org/mxml
Apache License 2.0
426 stars 157 forks source link

OSS Fuzz integration #326

Closed JakubHanzalik closed 3 weeks ago

JakubHanzalik commented 3 weeks ago

My name is Jakub Hanzalik and I would like to submit mxml to OSS-Fuzz. If you are not familiar with the project, OSS-Fuzz is Google's platform for continuous fuzzing of Open Source Software. In order to get the most out of this library, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you!

michaelrsweet commented 3 weeks ago

Mini-XML is already part of a bunch of fuzzing projects. I'm really not interested in adding more cruft to the project. Better to simply have OSS-Fuzz import mxml underneath the necessary harness and scripts.

JakubHanzalik commented 3 weeks ago

Would you be comfortable with me integrating this project into OSS-Fuzz, storing the scripts within their project? If so, could you provide me with an email address where any discovered bugs could be sent? @michaelrsweet

michaelrsweet commented 3 weeks ago

Adding to OSS-Fuzz is fine. Use "security@msweet.org" for security bugs.