Hint: Testing OSS to find weaknesses

[saiedt]

Not really an issue but a hint to have a look at https://github.com/google/oss-fuzz

[cstockloew]

Looks interesting, but Java is not supported ("Currently OSS-Fuzz supports C and C++ code").
Additionally, it seems to use random data, so each test run is different. This may not be the best choice to be used as itest but could be done in a separate CI project; however, hudson is down.