[MS19] Google OSS-Fuzz integration 1/2

[vy]

Fuzzing is an automated software testing technique that involves providing invalid, unexpected, or random data as inputs to a computer program. OSS-Fuzz is Google's automated platform to fuzz noteworthy F/OSS projects and it has been shown to be capable of detecting Log4Shell in ~5 minutes with a one-line fuzz target. In this milestone, we delivered a fully-fledged OSS-Fuzz integration not just for Log4j, but also Log4cxx:

• Fuzzing integration for Log4j
• Log4j integration to OSS-Fuzz (Revamp Log4j tests google/oss-fuzz#12304)
• Fuzzing integration for Log4cxx
• Log4cxx integration to OSS-Fuzz (Add Log4cxx integration google/oss-fuzz#12352)

We are in the process of troubleshooting issues related with the OSS-Fuzz infrastructure – see google/oss-fuzz#12349 and google/oss-fuzz#12417 for details. We will tackle these in the 2nd part of the OSS-Fuzz integration project, i.e., the 20th milestone (#2892).

[grobmeier]

thanks, completed