Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[uriparser] 3 of 6 public corpus downloads fail with HTTP status 403 — please help! #12948

Open
hartwork opened this issue Jan 17, 2025 · 0 comments

Comments

@hartwork
Copy link
Contributor

hartwork commented Jan 17, 2025

Hello, uriparser upstream here 👋

I'm running regression tests against the public OSS-Fuzz corpora in upstream CI (which works well in general, this workflow if curious). Unfortunately, of the six public corpora of OSS-Fuzz for uriparser

  • uri_dissect_query_malloc_fuzzer
  • uri_dissect_query_mallocw_fuzzer
  • uri_free_fuzzer
  • uri_freew_fuzzer
  • uri_parse_fuzzer
  • uri_parsew_fuzzer

…only three can be downloaded successfully while the other three fail with HTTP status 403 for no apparent reason:

# for i in uri_{dissect_query_malloc,free,parse}{,w}_fuzzer; do xargs -t curl --head --silent <<<"https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_${i}/public.zip" | head -n1 ; done
curl --head --silent https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_uri_dissect_query_malloc_fuzzer/public.zip
HTTP/2 200 
curl --head --silent https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_uri_dissect_query_mallocw_fuzzer/public.zip
HTTP/2 403 
curl --head --silent https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_uri_free_fuzzer/public.zip
HTTP/2 200 
curl --head --silent https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_uri_freew_fuzzer/public.zip
HTTP/2 403 
curl --head --silent https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_uri_parse_fuzzer/public.zip
HTTP/2 200 
curl --head --silent https://storage.googleapis.com/uriparser-backup.clusterfuzz-external.appspot.com/corpus/libFuzzer/uriparser_uri_parsew_fuzzer/public.zip
HTTP/2 403 

Is there a chance that you could fix the permissions (or the download in general) of the other three corpus files to be truly public and unblock my pull request uriparser/uriparser#212 ? Thanks in advance!

CC @tyler92

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant