[FFmpeg-devel] [OSS-Fuzz] Have you considered enabling memory sanitizer?

[Kacper Michajlow]

Hi,

Like in the topic. I think it would be useful to enable MSAN on
OSS-Fuzz. We get some tiny issues and it would be probably good to
have them tracked upstream. All infra is here, so enabling it is as
simple as adding it to the project.yaml. Except libbz2.so and libz.so
would have to be built inline instead, looking at the build.sh, they
are prebuilt. The rest should just work (TM), but needs to be tested.
You can set an "experimental' flag to have it not create issues on
monorail, initially.

Thanks,
Kacper

diff --git a/projects/ffmpeg/project.yaml b/projects/ffmpeg/project.yaml
index fe510402f..7aba17cc5 100644
--- a/projects/ffmpeg/project.yaml
+++ b/projects/ffmpeg/project.yaml
@@ -12,6 +12,10 @@ auto_ccs:
- "twsmith at mozilla.com"
- "kempfjb at gmail.com"
- "jordyzomer at google.com"
+sanitizers:
+ - address
+ - memory
+ - undefined
fuzzing_engines:
- afl
- honggfuzz