Replying to this email means your email address will be shared with the team that works on this product. https://issues.oss-fuzz.com/issues/481932457
Changed [email protected] added comment #14: I'm pasting this email here as it belongs here: From: Oliver Chang <[email protected]> To: "[email protected]" <[email protected]> Subject: Re: Issue 481932457: gpsd:FuzzDrivers: Crash in gpsd_poll Date: Sun, 8 Feb 2026 12:02:17 +1100 Hi Gary, It looks like I conflated two separate concerns here. Is there a documented embargo policy for gpsd for us to look at? I wasn't able to find one. Opening up issues once a patch is made public (e.g. merged upstream) has been OSS-Fuzz's default disclosure policy since inception (and is handled by our automation). Also, I wanted to clarify: while the issue text is made public, detailed information such as full stacktraces (i.e.the oss-fuzz.com links) or PoCs are NOT made public. There's generally not much more information you can gain from the issue being made public that you can't already get from a publicly merged patch. If there are still concerns with this approach here, please let me know and we can figure something out. Our goal is to make OSS-Fuzz a useful service for the open source community. Kind regards, Oliver On Sun, 8 Feb 2026 at 11:06, garyedmundsmiller <[email protected]> wrote:
Replying to this email means your email address will be shared with the team that works on this product. https://issues.oss-fuzz.com/issues/481932457
*Changed*
*[email protected] <[email protected]> added comment #13 <https://issues.oss-fuzz.com/issues/481932457#comment13>:* Clearly you did not read my comment. Once again:
>> This bug has been fixed. It has been opened to the public.
>That is the point of embargoes that you ignore???
Nothing there about "malling list". This issue is public, it should not be public _______________________________
*Reference Info: 481932457 gpsd:FuzzDrivers: Crash in gpsd_poll* component: Public Trackers > Chromium Public Trackers > OSS Fuzz <https://issues.oss-fuzz.com/components/1638179> status: Verified reporter: [email protected] assignee: [email protected] verifier: [email protected] cc: [email protected], [email protected], [email protected], and 3 more collaborators: [email protected] type: Vulnerability access level: Default access priority: P2 severity: S2 hotlist: ClusterFuzz-Verified <https://issues.oss-fuzz.com/hotlists/6182735>, Reproducible <https://issues.oss-fuzz.com/hotlists/6182481>, Stability-Memory-MemorySanitizer <https://issues.oss-fuzz.com/hotlists/6182183> retention: Component default Disclosure: May 6, 2026 Project: gpsd Reported: Feb 5, 2026
Generated by Google IssueTracker notification system.
You're receiving this email because you have the following role(s) on the issue: cc Unsubscribe from this issue <https://issues.oss-fuzz.com/issues/481932457?unsubscribe=true>.
_______________________________ Reference Info: 481932457 gpsd:FuzzDrivers: Crash in gpsd_poll component: Public Trackers > 1362134 > OSS Fuzz status: Verified reporter: [email protected] assignee: [email protected] verifier: [email protected] cc: [email protected], [email protected], [email protected], and 3 more collaborators: [email protected] type: Vulnerability access level: Default access priority: P2 severity: S2 hotlist: ClusterFuzz-Verified, Reproducible, Stability-Memory-MemorySanitizer retention: Component default Disclosure: May 6, 2026 Project: gpsd Reported: Feb 5, 2026 Generated by Google IssueTracker notification system.
