Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
I am requesting permission to integrate [libconfig](https://github.com/hyperrealm/libconfig) into OSS-Fuzz. I believe that this project is a good candidate for OSS-Fuzz integration as it serves as a preeminent library for parsing and reading configuration files. The [Linux](https://github.com/torvalds/linux/blob/master/tools/thermal/thermometer/thermometer.c) kernel, [Janus WebRTC Server](https://github.com/meetecho/janus-gateway), and the [SSLH](https://github.com/yrutschle/sslh) project are just a few examples of high-impact and security relevant projects that utilize this library. In addition to the possibility of uncovering edge-cases and bugs in the parsing of configuration files, there is the possibility of a malicious actor crafting a corrupted config file for an elevated service that could be used to perform privilege escalation. Please see upstream approval for integration [here](hyperrealm/libconfig#244)
- Loading branch information