google
Crow: Initial project request
I am requesting permission to integrate Crow into OSSFuzz. I believe that this project is a good candidate for OSS-Fuzz integration as it is a C++ implementation of a HTTP / websocket framework that enjoys a large user-base. Being written in C++ and being exposed to the network, fuzzing could be applied to uncover potential bugs and / or security concerns in the parsing of incoming HTTP requests.
capuanob is integrating a new project:
- Main repo: https://github.com/CrowCpp/Crow
- Criticality score: 0.58587
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
Who are some high profile users?
@jonathanmetzman While I am not personally aware of which projects use Crow, I do know that it is one of the most popular "Flask-alternatives" for C++ web-services.
Historically, it has also had CVEs against it, such as CVE-2022-38667. I believe it is a security relevant project due to its network-facing nature and the fact that critical CVEs that provide remote code execution have been uncovered in the past.
@DonggeLiu Good morning! Reaching out to see if the panel has discussed this repository?
@DonggeLiu Good morning! Reaching out to see if the panel has discussed this repository?
Yes, approved. Please proceed, thanks!
