[mapserver-dev] Fuzzing MapServer

[Seth G]

Sounds a great idea and something deserving of funding IMO. I'd imagine the setup is easier than all the following fixes though?
Is the fuzz testing linked to Google in some way? The list at https://github.com/google/oss-fuzz/tree/master/projects includes GDAL, Proj4, and PostGIS. 
I see MS also have their own project too https://github.com/microsoft/onefuzz

--
web:http://geographika.co.uk
twitter: @geographika


On Thu, Apr 15, 2021, at 4:50 AM, Steve Lime wrote:
> Hi all: MapServer is a pretty old project w/relatively complex code. What do folks think about making fuzzing MapServer as part of the 8.0 release? I'd feel better knowing that we did everything possible to deliver a stable and secure platform for users. It seems like fuzz testing would be particularly well suited to testing MapServer. I can't imagine it's a trivial effort but doing so ahead of a major release seems like the right time. I know GDAL has been through it and maybe Even can offer some advice.
> 
> --Steve
> _______________________________________________
> mapserver-dev mailing list
> mapserver-dev at lists.osgeo.org <mailto:mapserver-dev%40lists.osgeo.org>
> https://lists.osgeo.org/mailman/listinfo/mapserver-dev
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-dev/attachments/20210415/9d1cc9c4/attachment.html>