Skip to content

Integrate support for library and binary fuzzing #2

Open

Description

@AndrewGMorgan

[Migrating bugs from bugzilla.kernel.org to a GitHub based tracker, as the future of bugzilla.kernel.org is no longer certain.]

This bug was originally https://bugzilla.kernel.org/show_bug.cgi?id=217411 .

A recent audit was performed on libcap and friends by https://x41-dsec.de/ . (The audit was
sponsored by the the Open Source Technology Improvement Fund (https://ostif.org/).

Addressing the findings is the subject of

   https://bugzilla.kernel.org/show_bug.cgi?id=217410

As part of the audit, the x41-dsec team developed a fuzzing code harness for the library
and some of the binaries. The full details of which are included in text form in the PDF
report. I'm filing this enhancement bug to track fully integrating this into the library and tools.

Since the findings from the audit did not include issues derived from the fuzzing, I plan to
defer implementing this part until after I release libcap-2.69 (which will include fixes for
issues found by the audit).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions