OSS Fuzz Integration

[ennamarie19]

Hi there!
My name is McKenna Dallmeyer and I would like to submit pdfplumber to OSS-Fuzz.

If you are not familiar with the project, OSS-Fuzz is Google's platform for continuous fuzzing of Open Source Software.

In order to get the most out of this program, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you!

[jsvine]

Hi @ennamarie19, and thank you for reaching out. My general inclination is to keep this repository as lean as is feasible. Would it be possible to run the fuzz harness in a synced fork? (Or via another similar approach?)

[ennamarie19]

@jsvine OSS-Fuzz's preference is for the fuzz harnesses to live upstream with the project, but there are some cases where the fuzzers live in another repo. I think we could make this work. Please let me know if you're okay with me moving forward with this! If so, could you share an email that I can include in my submission? This will give you access to review any bugs that come up in the OSS-Fuzz dashboard.

[ennamarie19]

@jsvine hi again! Are you supportive of me moving forward with developing a fuzz harness for pdfplumber? :)

[jsvine]

Thanks for following up. No objection from me, and you can use the email address listed in my GitHub profile. Looking forward to seeing what the fuzzers generate.