Mastodawn

[RSS] Streamlining Google's OSS VRP: Key Rule Updates

https://bughunters.google.com/blog/ossvrp-rule-updates-2026

Blog: Streamlining Google’s OSS VRP: Key Rule Updates

Read about our updates to the OSS VRP rules which are designed to help us filter out low-quality reports and focus on real-world impact.

Show thread

Addison 6d ago

@[email protected] meanwhile, they are also sending slop to OSS folks. See my most recent comments in PCRE2 repo, lol

Show thread

buherator 6d ago

@addison Could you provide some links?

Show thread

Addison

@[email protected] didn't get a notif for this, soz

https://github.com/PCRE2Project/pcre2/pull/881

fuzz: fix stack-use-after-scope in LLVMFuzzerTestOneInput by oliverchang · Pull Request #881 · PCRE2Project/pcre2

A variable callout_count is declared within the scope of a for loop in the function LLVMFuzzerTestOneInput. The address of this variable is passed to the function pcre2_set_callout() and stored wit...

GitHub