Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[scapy] move the fuzz target upstream #12114

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

evverx
Copy link
Contributor

@evverx evverx commented Jun 23, 2024

as discussed in #12050

(It's a draft because I'm not sure if it's OK to move it and make the licence compatible with the repository. It would be great if someone could confirm that it's OK: secdev/scapy#4441)

Copy link

evverx has previously contributed to projects/scapy. The previous PR was #12074

@evverx
Copy link
Contributor Author

evverx commented Aug 1, 2024

I'll go ahead and close this since it hasn't been confirmed that it's OK to move the fuzz target.

On a somewhat related note having read https://security.googleblog.com/2024/06/hacking-for-defenders-approaches-to.html I'm kind of curious how all those patches and fuzz targets are going to be licensed.

@evverx evverx closed this Aug 1, 2024
@evverx
Copy link
Contributor Author

evverx commented Aug 1, 2024

Reopening in the hope that it can be approved in the end.

@evverx evverx reopened this Aug 1, 2024
@evverx
Copy link
Contributor Author

evverx commented Aug 1, 2024

https://security.googleblog.com/2024/06/hacking-for-defenders-approaches-to.html

Speaking of AI I can remember an auto-generated patch that was on its way to reintroduce a remote DoS to systemd-resolved because that thing learned something on StackOverflow or something like that :-) I don't think the researchers published their paper in the end but "Validating the patches by running crashes and tests to ensure the crash was prevented and the functionality was not impacted" seems reasonable :-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant