1962321 - Fuzz introspector reports contain duplicate fuzz targets

Status: ASSIGNED

(NSS :: Test, defect, P3)

Description

[Maurice Dauer [:mdauer]]

The fuzz introspector reports contain duplicate fuzz targets, e.g. on https://storage.googleapis.com/oss-fuzz-introspector/nss/inspector-report/20250422/fuzz_report.html, the ASN1 fuzz target is picked up twice as /src/nss/out/Debug/../../fuzz/targets/asn1.cc and asn1.

Comment 1

[Maurice Dauer [:mdauer]]

Attachment: Bug 1962321 - Clear build directories after oss-fuzz build, r?#nss-reviewers

Comment 2

[Dennis Jackson]

https://hg.mozilla.org/projects/nss/rev/1d2763557cffe86dac187cedddc9967772dfaa08

Marking leave-open whilst we wait to see if it fixes the issue.

Comment 3

[Maurice Dauer [:mdauer]]

Attachment: Bug 1962321 - Remove out/ directory after oss-fuzz build, r?djackson

Comment 4

[BugBot [:suhaib / :marco]]

The severity field is not set for this bug.
:beurdouche, could you have a look please?

For more information, please visit BugBot documentation.

Comment 5

[Maurice Dauer [:mdauer]]

The patch from our side unfortunately doesn't seem to fix it. I opened an issue in the fuzz-introspector repo: https://github.com/ossf/fuzz-introspector/issues/2160.

Comment 6

[Maurice Dauer [:mdauer]]

Attachment: Bug 1962321 - Revert removing out/ directory after ossfuzz build, r?djackson

This didn't fix the fuzz introspector issue and instead seems to have caused oss-fuzz to write a workaround for caching: https://github.com/google/oss-fuzz/pull/13492.

Comment 7

[BugBot [:suhaib / :marco]]

The leave-open keyword is there and there is no activity for 6 months.
:mdauer, maybe it's time to close this bug?
For more information, please visit BugBot documentation.