Qt Contributors Summit 2019 -Fuzzing Qt

From Qt Wiki
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Introduction

  • Explained briefly what fuzzing is in general
  • Showed how to fuzz Qt itself
    See readme file

What's missing to test Qt in oss-fuzz?

Google offers infrastructure and workflow for fuzzing free software, see oss-fuzz.

  • Qt still needs to support more sanitizers
  • A docker image defines how to build Qt and the fuzz targets
    A prototype exists, but needs tuning

Robert is working on both.

Which code needs fuzz testing the most?

Agreed criteria: Code that operates on possibly untrusted data

Proposals from the audience:

Robert will try adding them one by one. If you'd like to contribute some, he will happily review them.

If you have further proposals, please comment here or write to Robert directly.