Skip to content

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Automatic Fuzzing to find bugs (e.g. as part of CI / via github action) #12789

Closed
hpvd opened this issue Nov 13, 2021 · 1 comment
Closed
Labels
lifecycle/stale type/enhancement The enhancements for the existing features or docs. e.g. reduce memory usage of the delayed messages

Comments

@hpvd
Copy link

hpvd commented Nov 13, 2021

Is your enhancement request related to a problem? Please describe.
Quality and Security could always be optimized...

Describe the solution you'd like
Use Automatic Fuzzing to find bugs (e.g. as part of CI / via github action)

OSS-Fuzz: Continuous Fuzzing for Open Source Software
https://github.com/google/oss-fuzz

has found
As of June 2021,
OSS-Fuzz has found over
30,000 bugs
in 500 open source projects (see https://github.com/google/oss-fuzz/tree/master/projects)

now it's available as part of CI via github-actions
https://github.com/google/clusterfuzzlite

ClusterFuzzLite offers the same features as ClusterFuzz while should be very easy to setup and use. It's already said to be in use by projects like systemd and curl.

Doc: https://google.github.io/clusterfuzzlite/

=> Using it for pulsar may help to strength quality and security
going well beyond the already great introduction of spotbugs ( see https://github.com/apache/pulsar/issues?q=enable+spotbugs+) and others

@hpvd hpvd added the type/enhancement The enhancements for the existing features or docs. e.g. reduce memory usage of the delayed messages label Nov 13, 2021
@hpvd hpvd changed the title Use Fuzzing to find bugs (e.g. as part of CI) Use Fuzzing to find bugs (e.g. as part of CI / via github action) Nov 13, 2021
@hpvd hpvd changed the title Use Fuzzing to find bugs (e.g. as part of CI / via github action) Use Automatic Fuzzing to find bugs (e.g. as part of CI / via github action) Nov 13, 2021
@github-actions
Copy link

The issue had no activity for 30 days, mark with Stale label.

@apache apache locked and limited conversation to collaborators May 8, 2023
@tisonkun tisonkun converted this issue into discussion #20252 May 8, 2023

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

Labels
lifecycle/stale type/enhancement The enhancements for the existing features or docs. e.g. reduce memory usage of the delayed messages
Projects
None yet
Development

No branches or pull requests

1 participant