Skip to content

Breaking protobuf-java fuzzer project #13734

@anandolee

Description

@anandolee

For https://issues.oss-fuzz.com/issues/411993459

We are investigating a Fatal-signal in ProtobufFuzzer for protobuf-java, we found out that the current protobuf-java project is breaking but non-reproducible. It builds the Protobuf Java runtime from our github/main which has pom.xml files of submodules removed and in turn failed mvn package. The concern is that it's testing against github/main but not the released Protobuf Java artifacts, and the main branch is not guaranteed to build or work at any time.

We have sent out a PR (already merged) regarding this: #13635

With that being said, the original OSSFuzz bug report does not seem to point to Protobuf Java but some low-level infrastructures. The "failing" test case is just empty and we couldn't reproduce the error with the fix (#13635).

We are wondering if it is an internal OssFuzz infra error than Protobuf's. We would like to get some support to understand and remediate the bug, and consult about any actionable steps we should take.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions