blob: 339784f13ebc66b0b5729fd80f5d71464b46b0c0 [file] [log] [blame] [view]
Mike Aizatsky3986fa32016-09-14 09:44:10 -07001# oss-fuzz
2
Mike Aizatsky45c194e2016-09-14 10:09:15 -07003oss-fuzz is an effort to apply coverage-guided software fuzzing on scale to test open source software. It grew out of Chrome in-process fuzzing effort ([Blog Post](https://security.googleblog.com/2016/08/guided-in-process-fuzzing-of-chrome.html), [Project Page](https://chromium.googlesource.com/chromium/src/testing/libfuzzer/)).
Mike Aizatsky3986fa32016-09-14 09:44:10 -07004
5
6*Project Status*: The project currently is in early stage. We focus on libFuzzer first. Documentation and smoothing the process is our main priority.
7
8## Documentation
9
10* [New Library Guide](docs/new_library.md) walks through steps necessary to add fuzzers to an open source project.
Mike Aizatsky3e3dcd22016-09-27 11:59:07 -070011* [Running and Building Fuzzers](docs/building_running_fuzzers.md) documents the process for fuzzers that are
12 *part of target project* source code repository.
13* [Running and Building External Fuzzers](docs/building_running_fuzzers_external.md) documents the process for fuzzers that are
14 *part of oss-fuzz* source code repository.
Mike Aizatskyef4d3ae2016-10-06 13:59:17 -070015* [Project List](docs/projects.md) lists OSS projects integrated with oss-fuzz.
Mike Aizatsky3986fa32016-09-14 09:44:10 -070016* [Chrome's Efficient Fuzzer Guide](https://chromium.googlesource.com/chromium/src/testing/libfuzzer/+/HEAD/efficient_fuzzer.md) while contains some chrome-specifics, is an excellent documentation on making your fuzzer better.
17
Oliver Changa25bf352016-10-07 18:28:27 -070018## Build status
19[Build status](https://oss-fuzz-build-logs.storage.googleapis.com/status.html)
20
Mike Aizatsky26819642016-10-06 14:02:52 -070021## Bounties
22
23* freetype2:
24[9](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9&can=1&q=&colspec=ID%20Type%20Component%20Status%20Priority%20Milestone%20Owner%20Summary),
25[10](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10&can=1&q=&colspec=ID%20Type%20Component%20Status%20Priority%20Milestone%20Owner%20Summary)
26[36](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36&can=1&q=&colspec=ID%20Type%20Component%20Status%20Priority%20Milestone%20Owner%20Summary)
27
28
Mike Aizatsky3986fa32016-09-14 09:44:10 -070029## References
30* [libFuzzer](http://llvm.org/docs/LibFuzzer.html)
31* [Chromium In-Process Fuzzing Project Page](https://chromium.googlesource.com/chromium/src/testing/libfuzzer/)
32