Re: Security actions to mitigate future vulnerabilities

2021-09-28 Thread Luís Ferreira via Gcc
On Tue, 2021-09-28 at 19:18 +0100, Jonathan Wakely wrote: > On Tue, 28 Sept 2021 at 18:15, Luís Ferreira > wrote: > > > > On Tue, 2021-09-28 at 17:59 +0100, Jonathan Wakely wrote: > > > On Tue, 28 Sept 2021 at 17:23, Luís Ferreira > > > > > > wrote: > > > > > > > > During my fuzzing test with l

Re: Security actions to mitigate future vulnerabilities

2021-09-28 Thread Jonathan Wakely via Gcc
On Tue, 28 Sept 2021 at 18:15, Luís Ferreira wrote: > > On Tue, 2021-09-28 at 17:59 +0100, Jonathan Wakely wrote: > > On Tue, 28 Sept 2021 at 17:23, Luís Ferreira > > wrote: > > > > > > During my fuzzing test with libfuzzer I found out that GCC is not > > > part > > > of OSS-Fuzz project. Would b

Re: Security actions to mitigate future vulnerabilities

2021-09-28 Thread Luís Ferreira
On Tue, 2021-09-28 at 17:59 +0100, Jonathan Wakely wrote: > On Tue, 28 Sept 2021 at 17:23, Luís Ferreira > wrote: > > > > During my fuzzing test with libfuzzer I found out that GCC is not > > part > > of OSS-Fuzz project. Would be cool to discuss here a bit more about > > fuzzing GCC codebase in

Re: Security actions to mitigate future vulnerabilities

2021-09-28 Thread Jonathan Wakely via Gcc
On Tue, 28 Sept 2021 at 17:23, Luís Ferreira wrote: > > During my fuzzing test with libfuzzer I found out that GCC is not part > of OSS-Fuzz project. Would be cool to discuss here a bit more about > fuzzing GCC codebase in order to mitigate some future vulnerabilities > that may appear. I can volu