oss-fuzz integration

[manunio]

Hi @eemeli , Would be interested in Fuzzing at OSS-Fuzz.

• OSS-Fuzz is a free service run by Google that performs continuous fuzzing of important open source projects, you can find more details in our FAQ.

• OSS-fuzz project will do the following each day;

  • Build each of your fuzz tests,
  • Run each of your fuzz tests on a distributed cluster,
  • Report bugs back to you via email or via the private bug tracker.

• As a part of integration I'll submit a PR here,

  • which adds jazzer.js as dev dependency.
  • Create a fuzz target invoking your code.

    // file "FuzzTarget.js"
    module.exports.fuzz = function (data /*: Buffer */) {
        const fuzzerData = data.toString();
        YAML.parseDocument(fuzzerData);
    };

• An example of such integration can be found here https://github.com/xmldom/xmldom/tree/master/fuzz

• If you would like to integrate, the only thing I need is an email, it must be associated with a google account like gmail (why?). by doing that, the provided email(s) will get access to the data produced by OSS-Fuzz, such as bug reports, coverage reports and more stats.

• Notice the email(s) affiliated with the project will be public in the OSS-Fuzz repo, as they will be part of a configuration file.

Note:

• While running fuzz target locally it was able to find bug like Fix malformed uri #498

[manunio]

Hi @eemeli friendly ping :)