Skip to content

Commit 18ea7ad

Browse files
authored
Remove unused fuzzit.sh script and key. (#2797)
In https://github.com/capstone-engine/capstone/security/advisories/GHSA-97v9-6w8p-mh32, Anton-4 pointed out that the FUZZIT_API_KEY was public in the script. This is no longer a problem because Fuzzit was acquired by GitLab in 2020, and they stated that all data was removed six months later. The advisory was closed by us because it doesn't seem to be a security issue. However, we don't know at this time if the key was public or private. If the key was public, it was allowed to be in the repo. If the key turns out to be private, it very likely has no impact anymore. Nonetheless, if it later turns out to be private, we can reopen the advisory. The fix, simply removing the unused script, would still be the same. GitHub doesn't seem to allow publishing closed advisories, so the link above unfortunately only works for maintainers. Thanks a lot, Anton-4, for reporting the issue! References: - https://github.com/capstone-engine/capstone/security/advisories/GHSA-97v9-6w8p-mh32 - https://web.archive.org/web/20201026032736/https://fuzzit.dev/2020/06/11/news-fuzzit-is-acquired-by-gitlab/
1 parent c597371 commit 18ea7ad

File tree

3 files changed

+0
-37
lines changed

3 files changed

+0
-37
lines changed

suite/fuzz/README.md

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -71,10 +71,3 @@ There are custom drivers :
7171
- onefile.c : simple one file driver
7272

7373
For libfuzzer, the preferred main function is now to use linker option `-fsanitize=fuzzer`
74-
75-
Fuzzit integration
76-
------
77-
78-
Travis will build the fuzz target with the different sanitizers.
79-
Then, Travis will launch sanity fuzzit jobs as part of continuous integration (for each of the sanitizers)
80-
The fuzzit target ids are stored in a configuration file fuzzitid.txt and used by fuzzit.sh

suite/fuzz/fuzzit.sh

Lines changed: 0 additions & 27 deletions
This file was deleted.

suite/fuzz/fuzzitid.txt

Lines changed: 0 additions & 3 deletions
This file was deleted.

0 commit comments

Comments
 (0)