Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:106317 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 11436 invoked from network); 29 Jul 2019 03:23:43 -0000 Received: from unknown (HELO mail-pl1-f179.google.com) (209.85.214.179) by pb1.pair.com with SMTP; 29 Jul 2019 03:23:43 -0000 Received: by mail-pl1-f179.google.com with SMTP id t14so26773285plr.11 for ; Sun, 28 Jul 2019 17:48:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:openpgp:autocrypt:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=barWkHBSIdyMwCiFPHGdLOYuyHBuL54bCaZLoIGuDOs=; b=h0++PGcaELWPqz1vFHqaXkKamFEuWyoVJfZEF4f6Bwrs/o/E6ZYjCGqDIzzYZCvxvP dyHugdNqUOFzyqUgrGK5iUocYfa+e5DFDNrQO/RAFVCNhDaq9fsD3qHisC0OicGx0hg0 IGl8NZf2Q22A3gsTKKIkIG7iWe7mM9Uzp/k/saLaL4Q+Q1U7fLDpFvcfXdkW4JFIGaTp WgIGeCZsHqG8ptQ8LGMBTkmkNRLUejHi7K08nUQtIYDjMokDUaBat3jhjRfOm9LUHLH6 +dqAPXWB3sat9GFHWnxHBYRqQyO2oVvnzYXRzH2K60ELnyxYUeaOPDGX5CtMgfMT2v3s VvbA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:openpgp:autocrypt:message-id :date:user-agent:mime-version:content-language :content-transfer-encoding; bh=barWkHBSIdyMwCiFPHGdLOYuyHBuL54bCaZLoIGuDOs=; b=J7mlVVI55lJ3YPitkjjtRZv1DUPJKV1fO1wUfdA9MhRcW8K1zJV+Hq9AfCQZz9L5Ai iG2kmkrkJ1iTLUbkzFYH2iWoTNo9ZJS/iepCV/i/4ZqWzQ1FhsTvXoCC474w7whkt+9b WhaxQwmQ5WGS+2NGky3Tjn9jftNp3gLgfZbN5ntJrG3aiA44kCnokHJ3sNrxmAQWaJd2 Q/6jFx2zkXeyf/aNRgJNo0Sv8a3a7eo52WCDVJuH91WDdRDkl5x9OUN5Unso+vYE9iPN NaReASo8RbQdPp0CJjOTt2SUPdPpzbpy6BOjO7e0M02uiZ4mHRegw0WUAwA+EhvHLnkg 3BxQ== X-Gm-Message-State: APjAAAUStRlSXACuefkgsfxHqmhKJ75aU5+Zc2TY15LTuYaXSJe5ZITD isO7g2Nc6OgITINqZQZ6bnNLA3u11g== X-Google-Smtp-Source: APXvYqyl4A1Lpa3fiaNEoQMBudgQAXNS/woIWuYhX2dnkRRJrrV0C/fps27+KpgZwjnQte70bXyyTA== X-Received: by 2002:a17:902:20e9:: with SMTP id v38mr10490955plg.62.1564361293249; Sun, 28 Jul 2019 17:48:13 -0700 (PDT) Received: from Stas-Pro-2016.local (c-24-4-176-254.hsd1.ca.comcast.net. [24.4.176.254]) by smtp.gmail.com with ESMTPSA id b126sm87913236pfa.126.2019.07.28.17.48.12 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 28 Jul 2019 17:48:12 -0700 (PDT) To: PHP Internals Openpgp: preference=signencrypt Autocrypt: addr=smalyshev@gmail.com; prefer-encrypt=mutual; keydata= mQMuBE9mqaARCACFSqcGmNunkjQQu3X+yXnTmFeEkvM4JXZTOBdR8aEevNGmmFEfyvjaDjWi 9hcwp4E/lYtC+P7VsVjM1OSX9eq0jC/lGL0ZyRXek+mNy0n5H1NSuTpf9Y18LMqhc4G+RU+L cNiZ9K0DJuOOvNLPxW7OHZguxb3wdKPXNVa2jyRfJAKm2uaJJMT1mTmFT9a0Q8SKr+mUrrJk uG0H2o6SzrKt8Wwoint1eh67zVsJaJtQFchnEZnlawIcqP2yC4nLGR3MkubowxoEBYCZet18 aHVVRbvpG2Qtob8Lu5xrsGbmXymTkHTdpvkfcJFADa8MzOL90zOxXwbGfbIZOlh5En8jAQCX lfnx2eQL3BSW/6XANa51dbWiEp1d1BAkpGKtZvlk0Qf+M9WAi+9aXMe3xP5krxtgnRNUf2WN 6Zdy2MxL1RRJCFbytLhl0ronC49BsGYVGshdEH8xhBbiIOJKuVZ/DTl9bEm7P9c7CC7iJyVC khUAhouH6xzZQNLR+RU+QebYzXypVfl99Qk7EdMmr/WAZCHLuvanyqepC5EBsa3VnAfQemSN oBeGBKWWLiOsPjvS72+y1z4RUMAfXHn4l/sFMt8zt7/74AmJPwZquV41p4mPO12V4+xPyc6R sB84sfsk2QVivU8w8AkvGQeYjXoz7Iwao95+fWteVzZ36KRQvUckP8pGjHlDXnHxJ0HI1I/k OBZSjwRwUf0dd73y6erPhbLk+gf+NdI3H9KGJBzG5/rVyWKwUeQ9d5ud4jTJRkQGvAP5pg76 vEa9dogbpe4W5Z+0BfbiJSnQmQWSHiZddj/t33ptbup44Ck6ZTgdlmFYMLF1hR47PIZTDKER EuKYGci/vq8snZvEJP9YCw/TtiHcMdrMKcY/+Lp8lQO0GHLPB9glVhnC0db6l1Xpg1CMI8/R ozBMcij30EgATggC/y2zbiqAFoS9FN9nXPbe4phStqABEyeZ+nXudt7PUYTjVgcrqo8bHZCi sBobWC7OnKyUzxVxzUeuPkIfmZuzkLaMw2McQdvwwsNvQ0DzaLP30c1Xsm/7EIYJcOWpzlVJ 5QrdmE0/BbQyU3RhbmlzbGF2IE1hbHlzaGV2IChQSFAga2V5KSA8c21hbHlzaGV2QGdtYWls LmNvbT6IegQTEQgAIgUCT2aqtAIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQL3lW vF2gS12XMwD9HuRIolSwIK77u8EY461y2u6sbX36n5/uo/LDQuxoi3sA/0MvpnvzOhv9Iufv vsZEj3E7i3h+iD5648YMwfTFCij+uQINBE9mqaAQCADfZPMpjZkkGZj3BY/7ApoLq4mwqzbh +CpLXwNn20tFNvSXfb8RdeXvVEb7Scx+W9qYpiaun2iXJgCVH8fgpZpR856ulT1q6uCG++CX ubEvip/eJkZl93/84h04KQJwsgOrAh0Om3OePRn8Pr+++0LNS0EL8uX/YHeTOGOnnmTqYTey SBVFdov6L4mepddfjekicKQqhL7mZh/xuq29JijT0uNNX8v4vDWQDu5dlAcdd+uB3gcXMD/P ginD11zp+6wtrWCm/+yBqpvDwXQX5PGUnwvbRfl7Ay3MmwmoXiecZMg0dwTSc7e0lhB4HGRH ZdBMJB4rHUVGdzqujK/ctOvrAAMFB/0Utb76Qe6sCMlHxVAmeE/fbo7Pi05btZ/x01r67dHf aMSP0riCKJ7M0OW+jAXtu9+z/BVnYisW67WWfxl2cS5tZDgiHgJARXWUOO72+sScHP8KQmTl 1z16gyKbwY3SmyBkwcpOL35nhUWNLy93syPoY6sZUTikr2bZYukHDQ33XBPs4e6MbWKfsa9q aVmnlOF3k5UqChjutfHaEa4Q7VP4wBIpphHBi9MI16oJIzzBPbGl2uoedjwiZ6QeQZnSuOVY ZxU2d3lRA8PrtfFN1VSlpEm/VcAvtieHUYWHN0wOu+cp3Slr5XJVNjTjJhl28SlinMME54mK AGf2Ldr/dRwXiGEEGBEIAAkFAk9mqaACGwwACgkQL3lWvF2gS126EQD/VVd3FgjLKglClRQP zdfU847tqDK4zJjbmRv5vLLwoE0A+wbrQs7jVGU3NrS0AIl5vUmewpp2BKzSkepy23nWmejw Message-ID: <35af7db3-5cba-fe59-1d04-960eacb5aba7@gmail.com> Date: Sun, 28 Jul 2019 17:48:11 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Subject: Merging fuzzing SAPI into core From: smalyshev@gmail.com (Stanislav Malyshev) Hi! As you probably know, we've been running PHP fuzzing under Google's OSS-Fuzz[1] project for a while now (and found and fixed some bugs due to it). This has been enabled by the PHP fuzzing API SAPI[2] which currently lives in a separate repository. Since the setup is working pretty well for a while now, I would like to propose to merge it into core repository as a core SAPI, and make Travis CI setup build it as part of the CI tests. This would ensure the fuzzing scripts are not broken by core changes (happened several times recently) and would provide wider exposure to the fuzzing setup we have, hopefully prompting extension authors and other contributors to add more fuzzing modules to it, thus enhancing PHP security and reliability. Are there any objections or suggestions about this? Do we need an RFC for it? Note that this is only for master branch (only master is being fuzzed now), though it would not be hard to port to other branches if there's interest, the fuzzer should work on pretty much any recent branch with small code changes. [1] https://github.com/google/oss-fuzz/ [2] https://github.com/php/php-fuzzing-sapi -- Stas Malyshev smalyshev@gmail.com