From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 450BF4B804 for ; Sun, 14 Jul 2024 19:55:52 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 125D568D949; Sun, 14 Jul 2024 22:55:50 +0300 (EEST) Received: from relay5-d.mail.gandi.net (relay5-d.mail.gandi.net [217.70.183.197]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 484CE68D5EB for ; Sun, 14 Jul 2024 22:55:43 +0300 (EEST) Received: by mail.gandi.net (Postfix) with ESMTPSA id 6A8FD1C0004 for ; Sun, 14 Jul 2024 19:55:42 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1720986942; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=5Alfihsej7VjWfEHB4jirKUxfwXvLgcWRcUPOIWzN5g=; b=j1k5kA4sVj+KXUdOKaUGbsCrssfnz5OMSuTMsX5g1j2uaXHvZAA9jSKGOKdlQnzXms+Ula RgdWi4NJiRZUumO7Jrz5hLVIk3tUP7XfHNG1pmBSbC3sgYu1Kyvo3zRu+HKP+EnkxlKiZ3 N3CSWKEv3DUbjaVfKtXIUFZJHD1eVqiYrVSmQBgY3wdv2bkA1+8P2ONA1VXuD/UIcp7DUT AaKXFiJKSHVTSDFYCwrrMgd7BMZ1CaO46vdv2luqCkx1xiaAMsutYydzEUsvXW8pwty6zz G4AbBXoLON5n2OKnb4SM54Osdt27C/iO2TfSvt6U7RLuv/Gha7KQLMdS5IskvA== Date: Sun, 14 Jul 2024 21:55:41 +0200 From: Michael Niedermayer To: FFmpeg development discussions and patches Message-ID: <20240714195541.GE4991@pb2> References: <20240626224510.GS4991@pb2> MIME-Version: 1.0 In-Reply-To: X-GND-Sasl: michael@niedermayer.cc Subject: Re: [FFmpeg-devel] [OSS-Fuzz] Have you considered enabling memory sanitizer? X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============5910990517193389418==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============5910990517193389418== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="XVjO8VCnuz2qIvDh" Content-Disposition: inline --XVjO8VCnuz2qIvDh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Jul 13, 2024 at 11:12:40PM +0200, Kacper Michajlow wrote: > On Thu, 27 Jun 2024 at 02:50, Kacper Michajlow wrote: > > > > On Thu, 27 Jun 2024 at 00:45, Michael Niedermayer > > wrote: > > > > > > On Wed, Jun 26, 2024 at 09:07:42PM +0200, Kacper Michajlow wrote: > > > > Hi, > > > > > > > > Like in the topic. I think it would be useful to enable MSAN on > > > > OSS-Fuzz. We get some tiny issues and it would be probably good to > > > > have them tracked upstream. All infra is here, so enabling it is as > > > > simple as adding it to the project.yaml. Except libbz2.so and libz.= so > > > > would have to be built inline instead, looking at the build.sh, they > > > > are prebuilt. The rest should just work (TM), but needs to be teste= d. > > > > You can set an "experimental' flag to have it not create issues on > > > > monorail, initially. > > > > > > I assumed ossfuzz would enable all sanitizers by default > > > > They do not do that by default, because MSAN requires all dependencies > > to be instrumented too. See > > https://google.github.io/oss-fuzz/getting-started/new-project-guide/#sa= nitizers > > > > Looking at build.sh for ffmpeg, it should be fine to enable it. > > Obviously I have not tested everything, but I was running some tests > > locally with MSAN and also tested it with mpv oss-fuzz builds where we > > build ffmpeg too with MSAN. > > > > - Kacper >=20 > I've sent a PR to enable MSAN and a few other build improvements. > Please take a look https://github.com/google/oss-fuzz/pull/12211 >=20 > Also, would it be ok to add myself to auto_ccs for ffmpeg? Mostly to > monitor what issues are reported upstream, as we get some reports in > mpv fuzzing and I never know if I should report it upstream (ffmpeg) > or it is already found by first-party fuzzing and I shouldn't make > more noise. you are welcome to submit bug reports, you are welcome to submit bug fixes if you find issues in FFmpeg. If someones work in FFmpeg or rather FFmpeg benefits from someone having access to the reports, then (s)he should receive access. This seems not to apply here Also i expect the number of outstanding ossfuzz issues to decrease now after the bulk of coverity issues has been dealt with thx [...] --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB The real ebay dictionary, page 1 "Used only once" - "Some unspecified defect prevented a second use" "In good condition" - "Can be repaird by experienced expert" "As is" - "You wouldnt want it even if you were payed for it, if you knew .= =2E." --XVjO8VCnuz2qIvDh Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCZpQtOgAKCRBhHseHBAsP q853AJkBRvQYsEBTDsfLp8Z2TrPgMD+MNgCeM8W68YCdLvkjhS5fQ5h3/OXxRxU= =1w+N -----END PGP SIGNATURE----- --XVjO8VCnuz2qIvDh-- --===============5910990517193389418== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============5910990517193389418==--