Stream: wasmtime

Topic: FYI fuzzing has been busted for a month


view this post on Zulip Alex Crichton (Jan 05 2026 at 21:25):

Turns out fuzz builds are broken and probably have been broken for ~1 month since the last-tested revision for some open fuzz bugs is a month old.

My best guess for why we didn't get a notification is that our coverage build has been broken ~forever (expectedly) and they probably lump the two together. Alas.

Looking to fix this in https://github.com/google/oss-fuzz/pull/14753

Cause of this was https://github.com/bytecodealliance/wasmtime/pull/12119

A historical change last month turned out to break the build of our fuzzers due to new build requirements (wasm blobs built during the fuzzer build), so this adds the corresponding Rust targets to ...
This commit adds a new fuzzer mode to the misc fuzzer of Wasmtime which is focused on async events and interleavings of components using the component-model-async proposal. This fuzzer works by hav...

view this post on Zulip Alex Crichton (Jan 21 2026 at 22:08):

@Chris Fallin or @fitzgen (he/him) do y'all (or anyone else) have contacts at Google we can ping about https://github.com/google/oss-fuzz/pull/14753?

A historical change last month turned out to break the build of our fuzzers due to new build requirements (wasm blobs built during the fuzzer build), so this adds the corresponding Rust targets to ...

view this post on Zulip Alex Crichton (Jan 21 2026 at 22:09):

I've pinged maintainers on that ~1 week apart twice and haven't gotten a response

view this post on Zulip Alex Crichton (Jan 21 2026 at 22:09):

Or, alternatively, one of y'all could try sending the same PR and see if it's just me who got deny-listed...

view this post on Zulip fitzgen (he/him) (Jan 21 2026 at 22:11):

I don't have any contacts on the oss-fuzz team or adjacent :-/

view this post on Zulip Chris Fallin (Jan 21 2026 at 22:11):

hmm, I don't think I know anyone who's relevant unfortunately either

view this post on Zulip Chris Fallin (Jan 21 2026 at 22:11):

maybe we could ping our binaryen-team friends and ask if they can help unstick this?

view this post on Zulip Alex Crichton (Jan 21 2026 at 22:14):

that's a good point yeah, I'll give it a few more days then reach out to Sam/Thomas

view this post on Zulip Alex Crichton (Jan 22 2026 at 15:33):

Merged now, yay! Build succeeded and stale oss-fuzz bugs are closed now. All that's left is to prepare for a possible onslaught of stuff we missed in the meantime


Last updated: Feb 24 2026 at 04:36 UTC