Account confirmers, Anti-spam team, canmove, Confirmed users, Bureaucrats and Sysops emeriti
4,083
edits
| Line 495: | Line 495: | ||
** Or utilize nightly population by filtering fuzzer test cases(as it sometimes finds security issues), if costs is an issue ? | ** Or utilize nightly population by filtering fuzzer test cases(as it sometimes finds security issues), if costs is an issue ? | ||
** We found about ~10bugs a week with running fuzzers on ~100 machines .Fuzzer's run's breakpad,parses to text output, matches to see if its a known bug,checks assertation failures,too much recursion, ref count leaks,inconsistent rendering for a given DOM tree | ** We found about ~10bugs a week with running fuzzers on ~100 machines .Fuzzer's run's breakpad,parses to text output, matches to see if its a known bug,checks assertation failures,too much recursion, ref count leaks,inconsistent rendering for a given DOM tree | ||
===Actions=== | |||
* QA to look at the output from the bug hunter tool given the current scenario | * QA to look at the output from the bug hunter tool given the current scenario | ||
*[bsmedberg to help with the action needed to resolve the issues] Disconnect between fuzzer bugs and the signature in crash-stat ? | *[bsmedberg to help with the action needed to resolve the issues] Disconnect between fuzzer bugs and the signature in crash-stat ? | ||
| Line 505: | Line 505: | ||
** Get a service on Socorro that will give current ranks of a signature on current releases. | ** Get a service on Socorro that will give current ranks of a signature on current releases. | ||
* Can we get Nightly ASan builds that can auto-update so adventerous users can use Nightly ASan as their regular browser? | * Can we get Nightly ASan builds that can auto-update so adventerous users can use Nightly ASan as their regular browser? | ||
== bsmedberg hour (see '''#s''') == | == bsmedberg hour (see '''#s''') == | ||
* ('''1''') JSON version of minidump stackwalk | * ('''1''') JSON version of minidump stackwalk | ||
edits