-
Notifications
You must be signed in to change notification settings - Fork 2.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[log4j2] intitial integration #7016
[log4j2] intitial integration #7016
Conversation
projects/log4j2/project.yaml
Outdated
@@ -0,0 +1,11 @@ | |||
homepage: "https://logging.apache.org/log4j/2.x/" | |||
language: jvm | |||
primary_contact: "?" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please just move one of your email to primary contact for you. We plan to start conversations with log4j team soon.
@@ -0,0 +1,51 @@ | |||
#!/bin/bash -eu |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you please check the CI build failure
889998f
to
2008abb
Compare
Build compile is fine now, just the archiving part is failing
Can verify build works locally using https://google.github.io/oss-fuzz/advanced-topics/reproducing/#reproducing-build-failures |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
|
||
FROM gcr.io/oss-fuzz-base/base-builder-jvm | ||
|
||
RUN curl -L https://downloads.apache.org/maven/maven-3/3.6.3/binaries/apache-maven-3.6.3-bin.zip -o maven.zip && \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: Probably should go in /work
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can come in next PR
@garydgregory @vy @rgoers - We would like to provide fuzz testing for log4j2 as part of OSS-Fuzz. |
@inferno-chromium That is simply awesome! Thanks so much! As you might imagine 😅, the entire crew is swamped with other priorities. Would you mind sharing this news via an email to the [email protected] as well, please? |
@vy - Yes, we plan to sync on this early Jan once fires are out. Hope you guys can relax from Christmas, thanks again for amazing work on incident response. |
@fmeum