Mayhem Integration

[noahShinabarger]

Hi! My name's Noah from ForAllSecure, and I'm opening this PR on behalf of one of the many "heroes'' who have integrated Mayhem fuzz testing with your project. The "Mayhem Heroes" program involves integrating fuzz testing to open source projects, in order to help secure the world's software. These integrations generally (but not always) include:

• A Dockerfile (for building the fuzz target)
• A Mayhemfile (for specifying fuzzing configuration)
• A Github Action (for fuzzing as part of CI)
• A fuzz target

In this target, Mayhem is using the -f flag to fuzz redsea's interpertation of files.

You can take a look at the status of the latest fuzzing results here: https://mayhem.forallsecure.com/mayhemheroes/redsea/redsea/2

Let me know if you have any questions about this PR!

For more information about the Heroes program, you can read this article: https://forallsecure.com/blog/forallsecure-launches-2-million-mayhem-heroes-program

[windytan]

Sorry, it sure looks like a good cause but I'm still not quite understanding how this works.

• Where can I see the individual fuzz test cases? I made an account to the site but can only see statistics.
• Is this testing some redsea functionality or, in fact, libsndfile's WAV file interpretation?

[windytan]

Closing as inactive