OSS Fuzz Integration

[ennamarie19]

My name is McKenna Dallmeyer and I would like to submit xmltodict to OSS-Fuzz.

If you are not familiar with the project, OSS-Fuzz is Google's platform for continuous fuzzing of Open Source Software.

In order to get the most out of this program, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you!

[martinblech]

Hi McKenna, sorry for the late reply. Happy to help with this, please send your PRs and I'll merge them.

[ennamarie19]

No worries! Thank you for getting back to me! Do you mind sharing an email that I can submit to OSS-Fuzz? It will be used to notify you of any bugs that are uncovered during the fuzzing process.

[martinblech]

Sure, my email is my github username at gmail. Thanks!

[ennamarie19]

Thank you!!

[ennamarie19]

Darn, I just dug into this a bit more and noticed that someone has already created a fuzzer for xmltodict about 4 years ago. Were you aware of this?

https://github.com/ennamarie19/oss-fuzz/tree/master/projects/xmltodict
#265

[martinblech]

Sorry I missed this. Please let me know if you need anything from my end to unblock this.