fuzzing anybody

[Ruediger Meier <sweet_f_a@gmx.de>]

Hello,

google is offereing "Fuzz testing" for famous OSS projects
  https://github.com/google/oss-fuzz

I've thought this might be a nice idea for util-linux and already 
registered
  https://github.com/google/oss-fuzz/pull/120

Stupidly I've missed the point that I would also need to write some code 
which intelligently feeds our UL programs with the generated random 
data to find bugs. I thought that this is what google would do for us 
but they only give us the their infrastructure for running the actual 
tests. ;)

So if anybody is interested in this fuzzing topic ... maybe someone has 
a good idea, say how to feed libsmartcol or libblkid with random data.

A good and even interesting point to start is this "libFuzzer Tutorial":
https://github.com/google/fuzzer-test-suite/blob/master/tutorial/libFuzzerTutorial.md

Also interesting to see how other projects are doing it already in 
google's oss-fuzz.

for example curl: 
https://github.com/google/oss-fuzz/blob/master/projects/curl/curl_fuzzer.cc

or openssl which has a fuzz/ sub-directory in their original project.
https://github.com/openssl/openssl/tree/master/fuzz

cu,
Rudi