How OSS-Fuzz Works: A Guide to Fuzz Testing for Open Source Projects
Fuzzing_in - Hardik Shah via YouTube
Overview
Explore the inner workings of OSS-Fuzz, a powerful open-source fuzzing platform, in this comprehensive 28-minute video tutorial. Dive into the fundamentals of OSS-Fuzz, examine its GitHub repository structure, and gain insights into project organization and Docker file configurations. Analyze the build file and fuzzing harness of libtiff as a practical example. Learn how to set up OSS-Fuzz on your local system, create Docker images, and build fuzzers. Follow along with a step-by-step demonstration of local fuzzing, and discover how to integrate fuzz testing into your open-source project workflow to enhance security and reliability.
Syllabus
Introduction
What is oss-fuzz
oss-fuzz github repo, projects, dockers files etc.
Understaning libtiff oss-fuzz build file and fuzzing harness
Configuring oss-fuzz on local system creating docker image and building fuzzers
Fuzzing on local system
Conclusion
Taught by
Fuzzing_in - Hardik Shah