Maintainers who own these projects: If you don't want i386 fuzzing, feel free to disable.
I figured i386 fuzzing is generally desirable since it can find more bugs but most projects won't switch because of inertia.
I wrote many of the zlib fuzzers that are used in Chromium.
I also just submitted a pull request for those to go to upstream zlib.
It would be handy for me to be notified when the fuzzers find something
in zlib.
This commit adds myself to the autocc of zlib.
Add a check for the recently added routines to combine crc32 checksums. This
change adds more code coverage, however the checksum_fuzzer still does not pass
the complexity check: (the threshold is at 100)
oss-fuzz$ build/out/zlib/checksum_fuzzer -runs=10 2>&1 | grep -Po "INFO: Loaded [[:digit:]]+ module.*\(.*(counters|guards)\):[[:space:]]+\K[[:digit:]]+"
92
https://docs.docker.com/engine/userguide/eng-image/dockerfile_best-practices/
I ran into this because I was getting errors locally, like:
E: Failed to fetch http://archive.ubuntu.com/ubuntu/pool/main/d/dpkg/libdpkg-perl_1.18.4ubuntu1.1_all.deb 404 Not Found [IP: 91.189.88.149 80]
It turns out you get these if you don't update, and the official best practices are to `run apt-get update && apt-get install`. In fact, running _any_ apt-get install command without the apt-get update && before it can result in unfortunate caching artifacts -- see "cache busting". (P.S. thanks to Peng on Freenode for helping me, I'm bad at Ubuntu.)
So:
sed -re \
's/RUN apt-get ((-y )?(install|build-dep))/RUN apt-get update \&\& apt-get \1/' -i \
projects/**/Dockerfile
I also manually fixed the cases that already ran apt-get update in their Dockerfile:
dlplibs/Dockerfile
grpc/Dockerfile
libreoffice/Dockerfile