oss-fuzz

https://github.com/cs-412-25/oss-fuzz

Science Score: 44.0%

This score indicates how likely this project is to be science-related based on various indicators:

✓
CITATION.cff file
Found CITATION.cff file
✓
codemeta.json file
Found codemeta.json file
✓
.zenodo.json file
Found .zenodo.json file
○
DOI references
○
Academic publication links
○
Academic email domains
○
Institutional organization owner
○
JOSS paper metadata
○
Scientific vocabulary similarity
Low similarity (9.9%) to scientific vocabulary

Last synced: 10 months ago · JSON representation ·

Repository

Basic Info

Host: GitHub
Owner: CS-412-25
License: apache-2.0
Language: Shell
Default Branch: master
Size: 96.7 MB

Statistics

Stars: 0
Watchers: 0
Forks: 0
Open Issues: 0
Releases: 0

Created about 1 year ago · Last pushed about 1 year ago

Metadata Files

Readme Contributing License Citation

OSS-Fuzz: Continuous Fuzzing for Open Source Software

Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of Chrome components, and we now want to share that service with the open source community.

In cooperation with the Core Infrastructure Initiative and the OpenSSF, OSS-Fuzz aims to make common open source software more secure and stable by combining modern fuzzing techniques with scalable, distributed execution. Projects that do not qualify for OSS-Fuzz (e.g. closed source) can run their own instances of ClusterFuzz or ClusterFuzzLite.

We support the libFuzzer, AFL++, and Honggfuzz fuzzing engines in combination with Sanitizers, as well as ClusterFuzz, a distributed fuzzer execution environment and reporting tool.

Currently, OSS-Fuzz supports C/C++, Rust, Go, Python, Java/JVM, and JavaScript code. Other languages supported by LLVM may work too. OSS-Fuzz supports fuzzing x86_64 and i386 builds.

Overview

OSS-Fuzz process diagram

Documentation

Read our detailed documentation to learn how to use OSS-Fuzz.

Trophies

As of August 2023, OSS-Fuzz has helped identify and fix over 10,000 vulnerabilities and 36,000 bugs across 1,000 projects.

Blog posts

2023-08-16 - AI-Powered Fuzzing: Breaking the Bug Hunting Barrier
2023-02-01 - Taking the next step: OSS-Fuzz in 2023
2022-09-08 - Fuzzing beyond memory corruption: Finding broader classes of vulnerabilities automatically
2021-12-16 - Improving OSS-Fuzz and Jazzer to catch Log4Shell
2021-03-10 - Fuzzing Java in OSS-Fuzz
2020-12-07 - Improving open source security during the Google summer internship program
2020-10-09 - Fuzzing internships for Open Source Software
2018-11-06 - A New Chapter for OSS-Fuzz
2017-05-08 - OSS-Fuzz: Five months later, and rewarding projects
2016-12-01 - Announcing OSS-Fuzz: Continuous fuzzing for open source software

Owner

Name: CS-412-25
Login: CS-412-25
Kind: organization

Repositories: 1
Profile: https://github.com/CS-412-25

Citation (CITATION.cff)

cff-version: 1.2.0
title: OSS-Fuzz
message: >-
  If you use this software, please cite it using the
  metadata from this file.
type: software
authors:
  - given-names: Abhishek
    family-names: Arya
    affiliation: Google LLC
    email: aarya@google.com
    orcid: 'https://orcid.org/0009-0009-4558-4314'
  - given-names: Oliver
    family-names: Chang
    email: ochang@google.com
    affiliation: Google LLC
    orcid: 'https://orcid.org/0009-0006-3181-4551'
  - given-names: Jonathan
    family-names: Metzman
    email: metzman@google.com
    affiliation: Google LLC
    orcid: 'https://orcid.org/0000-0002-7042-0444'
  - given-names: Kostya
    family-names: Serebryany
    email: kcc@google.com
    affiliation: Google LLC
    orcid: 'https://orcid.org/0009-0009-2379-3641'
  - given-names: Dongge
    family-names: Liu
    email: donggeliu@google.com
    affiliation: Google LLC
    orcid: 'https://orcid.org/0000-0003-4821-7033'
repository-code: 'https://github.com/google/oss-fuzz'
abstract: >-
  OSS-Fuzz is an open-source project by Google that provides
  continuous fuzzing for open-source software. It aims to
  make common open-source software more secure and stable by
  combining modern fuzzing techniques with scalable,
  distributed execution. As of August 2023, OSS-Fuzz has
  helped identify and fix over 10,000 vulnerabilities and
  36,000 bugs across 1,000 projects.
keywords:
  - open-source
  - fuzzing
license: Apache-2.0

GitHub Events

Total

Delete event: 190
Push event: 12
Create event: 190

Last Year

Delete event: 190
Push event: 12
Create event: 190

Dependencies

.github/workflows/cflite_pr.yml actions

google/clusterfuzzlite/actions/build_fuzzers v1 composite
google/clusterfuzzlite/actions/run_fuzzers v1 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v4 composite
github/codeql-action/analyze v2 composite
github/codeql-action/autobuild v2 composite
github/codeql-action/init v2 composite

.github/workflows/infra_tests.yml actions

actions/checkout v4 composite
actions/setup-python v5 composite
google-github-actions/setup-gcloud v0 composite

.github/workflows/pr_helper.yml actions

actions/checkout v4 composite
actions/github-script v7 composite
actions/setup-go v5 composite
actions/setup-python v5 composite

.github/workflows/presubmit.yml actions

actions/checkout v4 composite
actions/setup-python v5 composite

.github/workflows/project_tests.yml actions

actions/checkout v4 composite
actions/setup-python v5 composite

infra/cifuzz/actions/build_fuzzers/action.yml actions

../../../build_fuzzers.Dockerfile * docker

infra/cifuzz/actions/run_fuzzers/action.yml actions

../../../run_fuzzers.Dockerfile * docker

infra/cifuzz/external-actions/build_fuzzers/action.yml actions

../../../build_fuzzers.Dockerfile * docker

infra/cifuzz/external-actions/run_fuzzers/action.yml actions

../../../run_fuzzers.Dockerfile * docker

infra/build/status/bower.json bower

web-component-tester ^6.0.0-prerelease.5 development
webcomponentsjs webcomponents/webcomponentsjs#^1.1.0 development
app-layout PolymerElements/app-layout#2.0-preview
app-route PolymerElements/app-route#2.0-preview
iron-ajax PolymerElements/iron-ajax#2.0-preview
iron-flex-layout PolymerElements/iron-flex-layout#2.0-preview
iron-icons PolymerElements/iron-icons#2.0-preview
paper-card PolymerElements/paper-card#2.0-preview
paper-icon-button PolymerElements/paper-icon-button#2.0-preview
paper-item PolymerElements/paper-item#2.0-preview
paper-tabs PolymerElements/paper-tabs#2.0-preview
polymer Polymer/polymer#^2.0.0-rc.3

projects/redis-rs/fuzz/Cargo.toml cargo

projects/rust-brotli/fuzz/Cargo.toml cargo

projects/serde_urlencoded/fuzz/Cargo.toml cargo

projects/starnix-netlink/fuzz/Cargo.toml cargo

projects/ttf-parser/fuzz/Cargo.toml cargo

projects/utf8parse/fuzz/Cargo.toml cargo

projects/zip-rs/fuzz/Cargo.toml cargo

.clusterfuzzlite/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python v1 build

infra/base-images/base-builder/Dockerfile docker

gcr.io/oss-fuzz-base/base-clang latest build

infra/base-images/base-builder-fuzzbench/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-go/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-javascript/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-jvm/Dockerfile docker

base latest build
gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-python/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-ruby/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-rust/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-builder-swift/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/base-images/base-clang/Dockerfile docker

gcr.io/oss-fuzz-base/base-image latest build

infra/base-images/base-image/Dockerfile docker

$parent_image latest build

infra/base-images/base-runner/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build
gcr.io/oss-fuzz-base/base-builder-ruby latest build
gcr.io/oss-fuzz-base/base-clang latest build
gcr.io/oss-fuzz-base/base-image latest build

infra/base-images/base-runner-debug/Dockerfile docker

gcr.io/oss-fuzz-base/base-runner latest build

infra/build/blog/Dockerfile docker

python 3.11-bullseye build

infra/build/build_status/Dockerfile docker

gcr.io/oss-fuzz-base/base-runner latest build

infra/build/functions/trial_build/Dockerfile docker

gcr.io/cloud-builders/gcloud latest build

infra/build/fuzz-introspector-webapp/Dockerfile docker

python 3.11-bullseye build

infra/cifuzz/cifuzz-base/Dockerfile docker

gcr.io/oss-fuzz-base/base-runner latest build

infra/cifuzz/test_data/external-project/.clusterfuzzlite/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/experimental/SystemSan/PoEs/node-shell-quote-v1.7.3/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

infra/experimental/SystemSan/PoEs/pytorch-lightning-1.5.10/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

infra/experimental/chronos/Dockerfile docker

gcr.io/cloud-builders/gcloud latest build

infra/uploader/Dockerfile docker

ubuntu 16.04 build

projects/abseil-cpp/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/abseil-py/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/ada-url/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/adal/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/aiohttp/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/airflow/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/alembic/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/ampproject/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder@sha256 19782f7fe8092843368894dbc471ce9b30dd6a2813946071a36e8b05f5b1e27e build

projects/angular/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-javascript latest build

projects/angus-mail/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/aniso8601/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/ansible/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/antlr3-java/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/antlr4-java/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-axis2/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-bcel/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-beanutils/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-cli/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-codec/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-collections/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-compress/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-configuration/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-csv/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-fileupload/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-geometry/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-imaging/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-io/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-jxpath/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-lang/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-logging/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-math/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-net/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-text/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-commons-validator/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-cxf/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-felix-dev/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/apache-httpd/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/apache-logging-log4cxx/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/apache-poi/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/aptos-core/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-rust latest build

projects/archaius-core/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/arduinojson/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/argcomplete/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/argo/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-go latest build

projects/args/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/args4j/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/arrow/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/arrow-java/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/arrow-py/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/askama/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-rust latest build

projects/asn1crypto/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/aspectj/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-jvm latest build

projects/aspell/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/assimp/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/astc-encoder/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder latest build

projects/asteval/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

projects/astro-compiler/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-go latest build

projects/astroid/Dockerfile docker

gcr.io/oss-fuzz-base/base-builder-python latest build

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Open Source Science