Google Online Security Blog: Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software

Security Blog

The latest news and insights from Google on security and safety on the Internet

Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software

1 de dezembro de 2016

Posted by Mike Aizatsky, Kostya Serebryany (Software Engineers, Dynamic Tools); Oliver Chang, Abhishek Arya (Security Engineers, Google Chrome); and Meredith Whittaker (Open Research Lead)[Cross-posted from the Google Testing Blog and the Google Open Source Blog]OSS-FuzzCore Infrastructure InitiativeRecentsecuritystoriesbuffer overflowuse-after-freefuzz testingAFLlibFuzzerfuzz various components of the Chrome browserSanitizerssometimesAddressSanitizerClusterFuzzEarly successes
FreeTypebillion deviceswasFreeType fuzzernew heap buffer overflowERROR: AddressSanitizer: heap-buffer-overflow on address 0x615000000ffa READ of size 2 at 0x615000000ffa thread T0 SCARINESS: 24 (2-byte-read-heap-buffer-overflow-far-from-bounds) #0 0x885e06 in tt_face_vary_cvtsrc/truetype/ttgxvar.c:1556:31 notifiedfixedconfirmedfull list
Contributions and feedback are welcome
150 bugsprojects~4 trillion test casesheretrackerherebest practicesGitHub

Google

Nenhum comentário :

Postar um comentário

Marcadores

#sharethemicincyber
#supplychain #security #opensource
android
android security
android tr
app security
big data
biometrics
blackhat
C++
chrome
chrome enterprise
chrome security
connected devices
CTF
diversity
encryption
federated learning
fuzzing
Gboard
google play
google play protect
hacking
interoperability
iot security
kubernetes
linux kernel
memory safety
Open Source
pha family highlights
pixel
privacy
private compute core
Rowhammer
rust
Security
security rewards program
sigstore
spyware
supply chain
targeted spyware
tensor
Titan M2
VDP
vulnerabilities
workshop

Archive

2024
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2023
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2022
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2021
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2020
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2019
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2018
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2017
- dez.
- nov.
- out.
- set.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2016
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2015
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2014
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- abr.
- mar.
- fev.
- jan.

2013
- dez.
- nov.
- out.
- ago.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2012
- dez.
- set.
- ago.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2011
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.

2010
- nov.
- out.
- set.
- ago.
- jul.
- mai.
- abr.
- mar.

2009
- nov.
- out.
- ago.
- jul.
- jun.
- mar.

2008
- dez.
- nov.
- out.
- ago.
- jul.
- mai.
- fev.

2007
- nov.
- out.
- set.
- jul.
- jun.
- mai.

Feed

Follow

Give us feedback in our Product Forums.

Google
Privacy
Terms