Skip to content

Fuzzing: Add fuzzer for DigitallySigned class #407

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 4, 2023

Conversation

arthurscchan
Copy link
Contributor

Summary

Adding fuzzer focusing on DigitallySigned classes.

Release Note

Documentation

Signed-off-by: Arthur Chan <[email protected]>
@loosebazooka
Copy link
Member

Fuzzing this is probably fine, but we shouldn't be the primary fuzzer for this conscrypt project. I guess we could always push our changes upstream?

@loosebazooka loosebazooka added the safe to test conformance testing label label Mar 30, 2023
@DavidKorczynski
Copy link
Contributor

Fuzzing this is probably fine, but we shouldn't be the primary fuzzer for this conscrypt project. I guess we could always push our changes upstream?

In essence I would do both. We will look at integrating conscrypt -- but at the same time I would suggest analysing all code of sigstore-java.

Copy link
Contributor

@AdamKorcz AdamKorcz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. IMO it is a good target given that sigstore-java has the code it its own repository.

@loosebazooka loosebazooka merged commit ad8f54f into sigstore:main Apr 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
safe to test conformance testing label
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants