Report matio issues to primary contact of hdf5 group #11806
Conversation
|
tbeu has previously contributed to projects/matio. The previous PR was #6018 |
|
@DonggeLiu Feel free to close if there is no response/approval by @derobins. |
|
You can report them to us, but I'm not going to make any promises about debugging issues through 3rd-party software until we've managed to close all of our own oss-fuzz issues. Hopefully, most of your issues will get closed as we work on our oss-fuzz issues over the summer. |
Hi @derobins, we appreciate the effort to maintain the project, and do not require immediate fixes. Just to clarify: OSS-Fuzz has a 90-day disclosure policy. Would that be acceptable for your situation? |
This is due to HDFGroup/hdf5#272 and the recently disclosed issues HDFGroup/hdf5#4350 and HDFGroup/hdf5#4351. Many of the found issues actually address libhdf5. I know that libhdf5 has its own oss-fuzz setup, but I cannot be sure if the reported issues for libmatio are also found there.
@derobins Being primary contact for hdf5 fuzzing report, do you approve?