Move "python-library-fuzzers" repository under the Python GitHub organization?

Core Development
1

Hello! I’m actively working on fuzzing work related to the zipfile and tarfile modules and noticed that our fuzzer definitions and corpuses for standard library modules are currently under hugovk/python-library-fuzzers. @hugovk graciously picked up where the previous maintainer left off after deleting their repositories.

I wanted to propose moving this repository under the Python GitHub organization so that more folks can contribute and review the changes proposed to the repository. This would put the fuzzers/corpuses for libraries in line with what we have today for the CPython language and modules which currently live in python/cpython under _xxtestfuzz.

I recommend recreating the repository without using GitHub’s transfer mechanism, instead manually creating a new repository and pushing the full commit history avoid GitHub commit SHA resolution weirdness, since the intent is to run code in this repository in our CI. After this is completed I can submit pull requests to our OSS-Fuzz configuration to point to the new location.

cc @gpshead @hugovk @pablogsal @alex_Gaynor @ammaraskar

11 Likes
2

I support this.

After the original repo was deleted, I made my fork from another fork, so we have a copy just in case we need it in the future. The future is now!

I’m happy with whatever approach.

If we just want to detach it from the GitHub fork network, so it’s a standalone repo, there’s some Git commands we can follow to achieve this:

https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/working-with-forks/detaching-a-fork

5 Likes
3

I think this makes sense and it’s a good idea. Centralising these under a common umbrella will certainly help with discovery and hopefully will converge efforts :ok_hand:

7 Likes
4

Sounds reasonable!
Could you add a README first? It’s not clear how to get started with this repo.

If we just want to detach it from the GitHub fork network, so it’s a standalone repo, there’s some Git commands we can follow to achieve this:

Maybe ask the owner of the (randomly chosen?) “main” repo and transfer that, to keep the existing network? GitHub - henices/python-library-fuzzers

1 Like
5

Yes definitely, I was planning on adding information to the README including how to add new fuzzers and do local development. edit: I’ve created a README in this pull request.

1 Like