Google's Fuzz Bot Sniffs Out 1,000 Bugs in Open Source Projects

In the past five months since Google announced OSS-Fuzz, a tool to sniff out bugs in open-source projects, they managed to find over 1,000 bugs, 264 of which are potential security vulnerabilities. 

Google's team has been working hard, processing 10 trillion test inputs a day. 47 projects have already integrated the Fuzz, leading to the discovery of over a thousand bugs. 

"OSS-Fuzz has found numerous security vulnerabilities in several critical open source projects: 10 in FreeType2, 17 in FFmpeg, 33 in LibreOffice, 8 in SQLite 3, 10 in GnuTLS, 25 in PCRE2, 9 in gRPC, and 7 in Wireshark. We’ve also had at least one bug collision with another independent security researcher (CVE-2017-2801)," Google said. 

According to the company, once a project is integrated into OSS-Fuzz, the continuous and automated nature of OSS-Fuzz means that they often catch these issues just hours after...