From 0b3f8b3a2920ea5926f979088f515a3762609262 Mon Sep 17 00:00:00 2001 From: Kostya Serebryany Date: Mon, 4 Dec 2017 12:54:32 -0800 Subject: [PATCH] first toy variant of fuzzing for AOSP (#1016) * first toy variant of fuzzing for AOSP * update e-mail, fix a typo * update e-mail --- projects/aosp/Dockerfile | 25 +++++++++++++++++++++++++ projects/aosp/build.sh | 23 +++++++++++++++++++++++ projects/aosp/project.yaml | 4 ++++ 3 files changed, 52 insertions(+) create mode 100644 projects/aosp/Dockerfile create mode 100644 projects/aosp/build.sh create mode 100644 projects/aosp/project.yaml diff --git a/projects/aosp/Dockerfile b/projects/aosp/Dockerfile new file mode 100644 index 000000000..54871560a --- /dev/null +++ b/projects/aosp/Dockerfile @@ -0,0 +1,25 @@ +# Copyright 2017 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ +FROM gcr.io/oss-fuzz-base/base-builder +RUN apt-get update && apt-get install -y curl + +# Get AOSP's version of sqlite, and get the fuzz target from upstream. +# Once AOSP updates sqlite we'll be able to use the fuzz target from AOSP. +RUN git clone https://android.googlesource.com/platform/external/sqlite +RUN curl https://raw.githubusercontent.com/mackyle/sqlite/6bfffe7cfc8ff834e61f7d92a6509dbbca423b04/test/ossfuzz.c > sqlite_fuzz.c + +# Copy the build file +COPY build.sh $SRC/ diff --git a/projects/aosp/build.sh b/projects/aosp/build.sh new file mode 100644 index 000000000..9939eeb13 --- /dev/null +++ b/projects/aosp/build.sh @@ -0,0 +1,23 @@ +#!/bin/bash -eu +# Copyright 2017 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +# build sqlite +$CC -c $CFLAGS sqlite/dist/sqlite3.c -I sqlite/dist +$CC -c $CFLAGS sqlite_fuzz.c -I sqlite/dist +$CXX $CXXFLAGS *.o $LIB_FUZZING_ENGINE -o $OUT/sqlite +# TODO: add a dictionary, build flags, etc, to better mimic +# https://github.com/google/oss-fuzz/tree/master/projects/sqlite3 diff --git a/projects/aosp/project.yaml b/projects/aosp/project.yaml new file mode 100644 index 000000000..dca28759e --- /dev/null +++ b/projects/aosp/project.yaml @@ -0,0 +1,4 @@ +homepage: "https://source.android.com/" +primary_contact: "android-oss-fuzz@google.com" +auto_ccs: + - "kcc@google.com"