-
Notifications
You must be signed in to change notification settings - Fork 2.5k
Description
For https://issues.oss-fuzz.com/issues/411993459
We are investigating a Fatal-signal in ProtobufFuzzer for protobuf-java, we found out that the current protobuf-java project is breaking but non-reproducible. It builds the Protobuf Java runtime from our github/main which has pom.xml files of submodules removed and in turn failed mvn package
. The concern is that it's testing against github/main but not the released Protobuf Java artifacts, and the main branch is not guaranteed to build or work at any time.
We have sent out a PR (already merged) regarding this: #13635
With that being said, the original OSSFuzz bug report does not seem to point to Protobuf Java but some low-level infrastructures. The "failing" test case is just empty and we couldn't reproduce the error with the fix (#13635).
We are wondering if it is an internal OssFuzz infra error than Protobuf's. We would like to get some support to understand and remediate the bug, and consult about any actionable steps we should take.