Add [email protected] to auto_ccs for image-png project.

[anforowicz]

OSS-Fuzz maintainers - can you PTAL?

Trustworthiness of this request:

• This is a memory-safe, Rust-based project (no unsafe in png and fdeflate crates, although there is some unsafe in other dependencies). This argues that most issues discovered by fuzzing should not be security issues, merely correctness/functional issues (or at most Denial-of-Service issues when a timeout happens for some inputs).
• I am contributing to the png project as a Chromium Security engineer, so I can hopefully claim some of the trust/karma that may be attributed to the Chromium Security team.

Motivation for this request:

• I have recently added a new failure mode to one of image-png fuzzers (see fuzzer changes underneath Support for resuming decoding after UnexpectedEof. image-rs/image-png#496) and fixed a few resulting failures found by OSS-Fuzz (e.g. Fix resuming next_frame after UnexpectedEof (APNG trouble). image-rs/image-png#498, Avoid infinite loops in buf_independent fuzzer after real EOF. image-rs/image-png#499, or Restore using NoMoreImageData errors. image-rs/image-png#500). I would like to monitor OSS-Fuzz for additional failures (if any) and help with investigating and/or fixing them.
• There is one OSS-Fuzz-reported failure in another image-png fuzzer that I have trouble repro-ing: https://oss-fuzz.com/testcase-detail/5146320858316800. I hope that getting access to the full fuzzing corpus will help me repro this in a different way locally.

Disclaimer: in the long-term the ownership of png / Skia / Chromium integration may shift, but I think it still makes sense to add me for now

/cc @fintelia

[github-actions]

anforowicz is a new contributor to projects/image-png. The PR must be approved by known contributors before it can be merged. The past contributors are: fintelia, silvergasp

[vitorguidi]

@fintelia @silvergasp can I go ahead and merge?

[nathaniel-brough]

I don't have any objections personally. This seems reasonable to me. But I'll leave this up to @fintelia as he is the maintainer.