{"push_id":2412623417,"size":11,"distinct_size":11,"ref":"refs/heads/master","head":"e4711004d611493ff35631d66c6d06bf1e799659","before":"1e35c5ab27f3a3cf6ae037c62fc1576c4798b576","commits":[{"sha":"5ee45c6d63c63c6ef9880c71c2070611e5dc8d2d","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"test-calendarspec: add the test case from oss-fuzz 6886\n\nBefore the fix 55a30fd4e8 in this would crash in calendarspec_from_time_t().","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/5ee45c6d63c63c6ef9880c71c2070611e5dc8d2d"},{"sha":"74353158121f9b4b39a5e6990d103022bb51422f","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"basic/calendarspec: set a limit on length of calendarspec component chains\n\nWe probably should allow very deep calls of our recursive functions. Let's add\na limit to avoid resource exhaustion. 240 is 10 per hour (if somebody is using\nthis for time based triggers...), so it should be more than enough for most use\ncases, and is conveniently below the 250 stack limit in msan.\n\noss-fuzz #6917.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/74353158121f9b4b39a5e6990d103022bb51422f"},{"sha":"4b8d0cdf040254770cc8e78c786de09592bb83bc","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"Add .gitattributes for test/fuzz-regressions\n\nThose reproducers are essentially binary, hence let's ignore whitespace\nin them.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/4b8d0cdf040254770cc8e78c786de09592bb83bc"},{"sha":"064c5938992966d5bfa172efdf3e528e90b3dae4","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"core/service: fix memleak of USBFunctionStrings and USBFunctionDescriptors\n\noss-fuzz #6892.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/064c5938992966d5bfa172efdf3e528e90b3dae4"},{"sha":"10062bbc35a28e95897f66fa5f4991b9b1f9df5d","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"unit-file: do not allow bogus IOSchedulingClass values\n\nWe have only three bits of space, i.e. 8 possible classes. Immediately reject\nanything outside of that range. Add the fuzzer test case and an additional\nunit test.\n\noss-fuzz #6908.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/10062bbc35a28e95897f66fa5f4991b9b1f9df5d"},{"sha":"1c56d501098f5559c7b97b693dd9be0a01bdfdc9","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"fuzz: add test case for oss-fuzz #6897 and a work-around\n\nThe orignal reproducer from oss-fuzz depends on the hostname (via %H and %c).\nThe hostname needs a dash for msan to report this, so a simpler case from\n@evverx with the dash hardcoded is also added.\n\nThe issue is a false positive from msan, which does not instruct stpncpy\n(https://github.com/google/sanitizers/issues/926). Let's add a work-around\nuntil this is fixed.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/1c56d501098f5559c7b97b693dd9be0a01bdfdc9"},{"sha":"c028bed19b3bd1a45cad0f5a120a05fc5a47169a","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"basic/cgroup-util: fix typo in debug message","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/c028bed19b3bd1a45cad0f5a120a05fc5a47169a"},{"sha":"5685efde88f3d228cc25b17c6a7b29155e8a1ea2","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"test-socket-util: add test for ListenNetlink with spaces","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/5685efde88f3d228cc25b17c6a7b29155e8a1ea2"},{"sha":"bd0763b642055647be789b30c393c5e93b046336","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"fuzz-unit-file: simply do not test ListenNetlink= at all\n\nmsan doesn't understand sscanf with %ms, so it falsely reports unitialized\nmemory. Using sscanf with %ms is quite convenient in\nsocket_address_parse_netlink(), so let's just not run the fuzzer for\nListenNetlink= at all for now. If msan is fixed, we can remove this.\n\nhttps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6884","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/bd0763b642055647be789b30c393c5e93b046336"},{"sha":"ca8700e922e280beeb3c5f37a967c21739da0f25","author":{"name":"Zbigniew Jędrzejewski-Szmek","email":"77dc704bc81310147658033dcc63fa6fb3a4d704@in.waw.pl"},"message":"core/unit: delay creating a stack variable until after length has been checked\n\npath_is_normalized() will reject paths longer than 4095 bytes, so it's better\nto not create a stack variable of unbounded size, but instead do the check first\nand only then do that allocation.\n\nAlso use _cleanup_ to make things a bit shorter.\n\nhttps://oss-fuzz.com/v2/issue/5424177403133952/7000","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/ca8700e922e280beeb3c5f37a967c21739da0f25"},{"sha":"e4711004d611493ff35631d66c6d06bf1e799659","author":{"name":"Evgeny Vereshchagin","email":"4a767b4b963a80bc9d1bd30cc2caffd18c892fb5@ya.ru"},"message":"Merge pull request #8461 from keszybz/oss-fuzz-fixes\n\nOss fuzz fixes","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/e4711004d611493ff35631d66c6d06bf1e799659"}]}
{"actor":{"display_login":"eworm-de"}}