|
Qubes OS wishes to improve its automated testing pipeline in various
ways, one of which being the introduction of continuous fuzzing.
The initial work will be performed by Paras Chetal as part of his
Google Summer of Code project [1], for which I am the mentor.
There are many pieces of code in Qubes OS which could benefit from
fuzzing, but initial focus is currently on the inter-vm file-copy
unpacker, and the GUI protocol [2][3].
According to [4], the way to request a new project be added to oss-fuzz
is for a member of the project to submit a PR here. I'm not an official
member of the Qubes OS team [5], but I am an active contributor.
Hopefully that's good enough...
[1]: https://summerofcode.withgoogle.com/projects/#5530206738579456
[2]: https://www.qubes-os.org/doc/gui/
[3]: https://github.com/QubesOS/qubes-gui-daemon/blob/master/gui-daemon/xside.c
[4]: https://github.com/google/oss-fuzz#accepting-new-projects
[5]: https://www.qubes-os.org/team/
|