
Oss Fuzz
Run Tika's OSS-Fuzz Jazzer targets locally against a working-tree checkout, build the...
Install
npx skills add apache/tika --skill oss-fuzz -g -a claude-code -y- Repository
- apache/tika4.1k
- Category
- Media
- Updated
- 3d ago
- License
- Apache-2.0
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- No, instructions only
What it does
Run Tika's OSS-Fuzz Jazzer targets locally against a working-tree checkout, build the image, build fuzzers from local source, fuzz a target, run a corpus as a regression pass, reproduce a crash, and add seeds. Use for "fuzz the OneNote parser", "run OneNoteParserFuzzer against these files", "reproduce an OSS-Fuzz crash", "fuzz my branch before merge".
Local override: $TIKA_SKILLS_LOCAL/oss-fuzz/LOCAL.md (default ~/.tika-skills),
read after this file, wins on conflict.
Tika OSS-Fuzz, local fuzzing
Tika is already in OSS-Fuzz as the apache-tika project (not tika).
It is Jazzer-based (coverage-guided, in-process JVM fuzzing), not the old
tika-fuzzing seed-mutation module (removed in TIKA-4506). The fuzz targets
and seed logic live in the oss-fuzz repo under
projects/apache-tika/, not in this repo:
project-parent/fuzz-targets/src/main/java/com/example/*Fuzzer.java, one Jazzer target per parser family. Each callsParserFuzzer.parseOne(...)(parse-from-bytes and parse-from-file) and swallowsTikaException | SAXException | IOException; anything else,Error(OOM, StackOverflow), a hang, or an unexpectedRuntimeException, is a finding.build.sh, buildstika-app, then thefuzz-targetsmodule.build_seeds.sh, packs Tika's own unit-test files into<Target>_seed_corpus.zipby file extension.


