fuzzing
Tutorials, examples, discussions, research proposals, and other resources related to fuzzing (by google)
woff2
By google
Our great sponsors
| fuzzing | woff2 | |
|---|---|---|
| 11 | 6 | |
| 3,342 | 1,406 | |
| 1.6% | 2.4% | |
| 2.2 | 2.1 | |
| 3 months ago | about 2 months ago | |
| C++ | C++ | |
| Apache License 2.0 | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
fuzzing
Posts with mentions or reviews of fuzzing.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-14.
- Structure-Aware Fuzzing with Libfuzzer
- GitHub - google/fuzzing: Tutorials, examples, discussions, research proposals, and other resources related to fuzzing
-
ok so i am kinda new to fuzzin/security research and ive just done this
so I just wanted to start to fuzz a little bit and I used libfuzzer for that. and as you can tell in this tutorial https://github.com/google/fuzzing/blob/master/tutorial/libFuzzerTutorial.md it tells you that if you leave it running like that you will get a bounty. and so I did exactly this, I followed the exact instructions listed there(I fuzzed this woff thing they mentioned) and my fuzzer said "SUMMARY: AddressSanitizer: heap-buffer-overflow" can I report that? or is this woff thing just for testing?
- I found a bug in Intel Skylake processors
- SiliFuzz: Fuzzing CPUs by proxy
- SiliFuzz: Fuzzing CPUs by Proxy [pdf]
- SiliFuzz - a work-in-progress system that finds CPU defects by fuzzing software proxies, like CPU simulators or disassemblers, and then executing the accumulated test inputs on actual CPUs on a large scale.
-
An implementation of CBOR in C
For a project like this, fuzz testing is also crucial. The issue pointed out by gremolata would have been trivial to find with fuzzing.
-
Address Sanitizer for MSVC Now Generally Available | C++ Team Blog
Another is testing: Many C++ projects use sanitizers regularly together with fuzzing, https://github.com/google/fuzzing/blob/master/docs/why-fuzz.md, https://github.com/google/fuzzing/blob/master/docs/intro-to-fuzzing.md#sanitizers
-
Jazzer brings modern fuzz testing to the JVM
Maybe a bit biased opinion here, but you could start with this blog post, and see whether you go more into C/C++ fuzzing or web fuzzing from there:
https://blog.code-intelligence.com/the-magic-behind-feedback...
https://github.com/google/fuzzing
woff2
Posts with mentions or reviews of woff2.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-14.
-
ok so i am kinda new to fuzzin/security research and ive just done this
The github you linked already has the framework on "how" to do it. If you are looking for the newest version, if you follow the path on that github they link you back to googles repo. Just clone this repo and compile it, and you will have the latest version.
-
[Jellyfin 10.8.4 on Docker] [WEBUI/Android Client] MKV subtitles detected and usable for some files, but not all of them.
I extracted and converted all of the fonts using ffmpeg and then https://github.com/google/woff2.git, set up the folder and made sure Jellyfin can see and select it from inside the mounted volumes on the container, and checked the enable fallback fonts box.
- Montserrat cyrillic issues?
-
Privacy-focused Google Fonts alternative
Font Squirrel's webfont generator is a popular tool that web devs use for generating webfonts from desktop fonts. You can also use Google's woff2_compress command line tool.
-
Optimizing fonts for the web
# clone woff2 git clone --recursive https://github.com/google/woff2.git # enter into the cloned repo cd woff2 # build make clean all # convert the font ./woff2_compress ~/Jost-400-Book-subset.ttf
- Need help in compiling
What are some alternatives?
When comparing fuzzing and woff2 you can also consider the following projects:
CMake - Mirror of CMake upstream repository
fonttools-opentype-feature-freezer - OTFeatureFreezer GUI app and pyftfeatfreeze commandline tool in Python to permanently "apply" OpenType features to fonts, by remapping their Unicode assignments
JQF - JQF + Zest: Coverage-guided semantic fuzzing for Java.
fontsource - Self-host Open Source fonts in neatly bundled NPM packages.
sandsifter - The x86 processor fuzzer
glyphhanger - Your web font utility belt. It can subset web fonts. It can find unicode-ranges for you automatically. It makes julienne fries.
meson - The Meson Build System
fonttools - A library to manipulate font files from Python.
javan-warty-pig - AFL-like fuzzer for the Java Virtual Machine
fonts - A privacy-friendly drop-in replacement for Google Fonts
cmake-init - The missing CMake project initializer
Montserrat