Closed
Description
Let's use this issue to maintain a list of projects that we want to see on oss-fuzz.
Volunteers welcome!
- binutils, e.g.
cplus_demangle(seen fuzzable bugs in the past) - more fuzz targets from LLVM, we currently have only llvm_libcxxabi
- libstdc++
regex(e.g. https://gcc.gnu.org/bugzilla/show_bug.cgi?id=79539) - libexif
- PCRE (we have PCRE2, but not PCRE)
- python (https://bugs.python.org/issue29505)
- gstreamer (https://lwn.net/Articles/708196/ and also fuzz gstreamer #93)
- mysql
- http://www.gfwx.org/
- http://www.libtiff.org/
- https://sourceforge.net/projects/giflib/
- https://github.com/jrmuizel/qcms/
- imagemagick @dlemstra (fuzz imagemagick #430)
-
graphviz @emdenrg (fuzz graphviz #182)(upstream not interested) - gstreamer @bilboed (fuzz gstreamer #93)
- vim/neovim @dpelle (fuzz vim/neovim #96)
- s2n @raycoll, @alexw91, @colmmacc (add s2n to OSS-Fuzz #238)
- libelf, libdwarf (elf toolchaing fuzzers: libelf, libdwarf #64)
(add to this list instead of creating a new comment) - more/better fuzzing for ICU https://github.com/google/oss-fuzz/tree/master/projects/icu
- apache httpd
- https://xerces.apache.org/xerces-c/
- https://github.com/google/piex
- libidn2
- libzip
- dovecot
- Node.js
- tcpdump
- bluez
- cairo
- coreboot
- dbus
- dhcpcd
- dtc (device tree compiler)
- laptop-mode-tools
- libcamera
- libevdev
- libiio
- libpciaccess
- modemmanager
- xf86-input-synaptics
- vlc
- php-src
- bind9
- projects from Cloud Native Computing Foundation(https://www.cncf.io/projects/)