Proposal: Integrate with google/oss-fuzz for continuous fuzz testing? about yoga

[silvergasp]

So I've got a draft PR ready to go integrating with OSS-fuzz in google/oss-fuzz#11533. The only thing I need to do now is add a primary contact. I've added [email protected] which seems to be CC'd on most of the other facebook integrations.

[NickGerleman]

Thank you for raising this, and contributing a PR implementing it. I think it is a good idea, so long as we make sure it isn't disrupted by any unrelated Yoga changes.

[silvergasp]

As a follow up I'm going to start the integration with google/oss-fuzz if you are still keen on it. There is an application/integration process which I can complete on your behalf. To do this I'll need a couple of things from you;

• A google/gmail email address that I can use for the primary contact. As far as I'm aware meta/facebook emails meet this requirement.
• You to comment on the PR that I'll create that will form the integration/application saying that you approve of the integration.

Given the popularity of yoga I'm reasonably confident that it'll be accepted into oss-fuzz, but there is a non-zero chance that it could be rejected.

[NickGerleman]

Thanks @silvergasp. Is there anything left to action on from our side?

[silvergasp]

Yeah, all I need is the email address that you'd like to use to get access to the bug tracker and oss fuzz dashboard. Just as a note, it'll be stored as plain text on the oss fuzz git repo. After that everything should be good to go.

[NickGerleman]

Reusing oss-fuzz probably makes sense if it is already being used, though I’m not actually sure where it is funelling to. I can try to find that out.

[silvergasp]

Easy do you want me to add your email to the config? That will give you personal access to the dashboard/bug tracker?

[NickGerleman]

I appreciate it. Could you use this address? https://github.com/facebook/yoga/commit/cc2a87d4f95d2deac3f4ffed02ca4c130aec70ba.patch

[silvergasp]

Ah sorry I missed this notification. I've pulled the trigger on the PR over at oss-fuzz now. All that is needed is to wait for the oss-fuzz team to approve.