Fuzzing Ladybird with tools from Google Project Zero

1. clusterfuzz

   1 4 5,407 9.7 Python

   Scalable fuzzing infrastructure.

   

   https://github.com/google/clusterfuzz

   At least Chromium has integrated multiple different fuzzers into their regular development workflow and found lots of bugs even before going public.

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. serenity

   2 265 31,907 10.0 C++

   The Serenity Operating System 🐞

   

   Indeed, given the existence of `JS::NonnullGCPtr`, `JS::GcPtr` intentionally corresponds to a nullable pointer, so it seems dangerous to convert one to a reference without a null-check.

   That said, a naive code search finds what *may* be more cases of this pattern:

   https://github.com/search?q=repo%3ASerenityOS%2Fserenity+%2F...

   Eg: https://github.com/SerenityOS/serenity/blob/a68b134e6dea5065... -> https://github.com/SerenityOS/serenity/blob/a68b134e6dea5065...

   In some of those search results, it is fine because there is a preceding null-check, and obviously I know nothing about this code other than this naive search result, but perhaps it would be prudent to vet all of them.

Suggest a related project