<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - cairo: oss-fuzz integration" href="https://bugs.freedesktop.org/show_bug.cgi?id=107386#c2">Comment # 2</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - cairo: oss-fuzz integration" href="https://bugs.freedesktop.org/show_bug.cgi?id=107386">bug 107386</a> from <a class="email" href="mailto:pdknsk@gmail.com" title="pdknsk <pdknsk@gmail.com>"> pdknsk</a> <pre>Security bugs have a 90-day disclosure deadline, so it's more or less expected they are fixed within that time frame. Lesser bugs don't necessarily need to be fixed, but the problem is those unfixed bugs block the fuzzer from proceeding. So someone from the project probably needs to be semi-dedicated to this, and at least occasionally fix some reported bugs. Sth. else: I noticed script surface can output to CAIRO_SCRIPT_MODE_ASCII and CAIRO_SCRIPT_MODE_BINARY, but I'm wondering where the latter is useful, in how it can be replayed? Doesn't seem to be implemented.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>