dvyukov / go-fuzz-corpus Goto Github PK

go-fuzz finds the following crasher: "{\"o\":0,\"o\":null}". This doesn't survive an Unmarshal/Marshal round trip. However, this is working as intended: The second value for key o overwrites the first during Unmarshal, and thus the round-trip fails. See golang/go#24415 for more discussion. We should teach the json Fuzz function that duplicate keys means a round trip failure is OK.

https://github.com/AlekSi/go-fuzz-corpus All history of examples/ directory is preserved.
I can't send a pull request because history is rewritten, you have to fetch and git push -f manually.

@dvyukov may I have write access to this repo?

Hi,

Recently we received this issue drewnoakes/metadata-extractor#561 in which @ZanderHuang and @Han0nly submitted several images that trigger exceptions in the Java metadata-extractor library. They explained that those images were derived from images in this repo, with additional fuzzing.

In that library's project we maintain a corpus of media files used for regression testing, which is an amazing asset for us. We try to add images there that trigger undesired behaviour before adding fixes. This helps us maintain quality over time, and parity between the Java and .NET implementations.

Of course adding other people's work to that repository must be done carefully, and so I want to ask whether we are permitted to use these derived works in our own Apache-2.0-licensed library.

Thank you.