Re: [C++] Arrow added to OSS-Fuzz

[Antoine Pitrou <so...@pitrou.net>]

Hello,

A quick update: since Arrow C++ started being fuzzed in OSS-Fuzz, 41
issues (usually crashes) on invalid input have been found, 35 of which
have already been corrected.

We plan to expand the fuzzed areas to cover Parquet files, as well as
serialized Tensor and SparseTensor data.

Regards

Antoine.


On Wed, 15 Jan 2020 19:59:24 +0100
Antoine Pitrou <an...@python.org> wrote:
> Hello,
> 
> I would like to announce that Arrow has been accepted on the OSS-Fuzz
> infrastructure (a continuous fuzzing infrastructure operated by Google):
> https://github.com/google/oss-fuzz/pull/3233
> 
> Right now the only fuzz targets are the C++ stream and file IPC readers.
> The first build results haven't appeared yet.  They will appear on
> https://oss-fuzz.com/ .   Access needs a Google account, and you also
> need to be listed in the "auto_ccs" here:
> https://github.com/google/oss-fuzz/blob/master/projects/arrow/project.yaml
> 
> (if you are a PMC or core developer and want to be listed, just open a
> PR to the oss-fuzz repository)
> 
> Once we confirm the first builds succeed on OSS-Fuzz, we should probably
> add more fuzz targets (for example for reading Parquet files).
> 
> Regards
> 
> Antoine.
>