aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorMarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>2024-09-24 22:14:25 +0200
committerMarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>2024-09-24 22:09:17 +0200
commitfa6c1946d235c6ea5b9384d8488d80aa3bcd0ad7 (patch)
tree7bc34946eebb307d6888111c17e7b88f2ad583c2 /doc
parent90a5786bba4baac1c0270e1f4bf5bb8c790e10de (diff)
doc: Adjust links in OSS-Fuzz section
Diffstat (limited to 'doc')
-rw-r--r--doc/fuzzing.md12
1 files changed, 5 insertions, 7 deletions
diff --git a/doc/fuzzing.md b/doc/fuzzing.md
index f98cc2132f..f9630cca0f 100644
--- a/doc/fuzzing.md
+++ b/doc/fuzzing.md
@@ -285,13 +285,11 @@ $ ./honggfuzz/honggfuzz --exit_upon_crash --quiet --timeout 4 -n 1 -Q \
# OSS-Fuzz
Bitcoin Core participates in Google's [OSS-Fuzz](https://github.com/google/oss-fuzz/tree/master/projects/bitcoin-core)
-program, which includes a dashboard of [publicly disclosed vulnerabilities](https://bugs.chromium.org/p/oss-fuzz/issues/list?q=bitcoin-core).
-Generally, we try to disclose vulnerabilities as soon as possible after they
-are fixed to give users the knowledge they need to be protected. However,
-because Bitcoin is a live P2P network, and not just standalone local software,
-we might not fully disclose every issue within Google's standard
+program, which includes a dashboard of [publicly disclosed vulnerabilities](https://issues.oss-fuzz.com/issues?q=bitcoin-core%20status:open).
+
+Bitcoin Core follows its [security disclosure policy](https://bitcoincore.org/en/security-advisories/),
+which may differ from Google's standard
[90-day disclosure window](https://google.github.io/oss-fuzz/getting-started/bug-disclosure-guidelines/)
-if a partial or delayed disclosure is important to protect users or the
-function of the network.
+.
OSS-Fuzz also produces [a fuzzing coverage report](https://oss-fuzz.com/coverage-report/job/libfuzzer_asan_bitcoin-core/latest).