WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com
Skip to content

Conversation

@ranok
Copy link

@ranok ranok commented Nov 21, 2025

Adds a simple Python XML parser fuzzer and corpus of files from [1]. The xml library is a built-in for CPython and XML has had a checkered security past, so adding this coverage will boost confidence in Python's robustness with XML input.

I will submit a separate PR to oss-fuzz once/if this is merged to add the fuzzer to the container building steps.

[1] https://github.com/strongcourage/fuzzing-corpus/tree/master/xml/libxml2

@hugovk
Copy link
Owner

hugovk commented Nov 21, 2025

This repo has moved to https://github.com/python/library-fuzzers, please can you re-open the PR there?

I'll update the README here and archive this one.

@ranok
Copy link
Author

ranok commented Nov 22, 2025

It doesn't look like the oss-fuzz repo is reflecting that change, the Dockerfile there still clones this repository. I'm happy to resubmit to another repo, but I think currently this is the one that's being used.

@ranok
Copy link
Author

ranok commented Nov 22, 2025

Here's the Dockerfile

@hugovk
Copy link
Owner

hugovk commented Nov 22, 2025

Yeah, it's pending this PR:

google/oss-fuzz#14300

@ranok
Copy link
Author

ranok commented Nov 22, 2025

PR submitted here: python/library-fuzzers#2

@ranok ranok closed this Nov 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants