mirror of https://github.com/google/oss-fuzz.git
mariadb-connector-j: initial integration (#11059)
Initial integration for project mariadb-connector-j. Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>
This commit is contained in:
Arthur Chan
GitHub
parent
fda1ebb0da
commit
0d80cb1c8a
|
|
@ -0,0 +1,23 @@
|
|||
# Copyright 2023 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
##########################################################################
|
||||
FROM gcr.io/oss-fuzz-base/base-builder-jvm
|
||||
RUN curl -L https://archive.apache.org/dist/maven/maven-3/3.6.3/binaries/apache-maven-3.6.3-bin.zip -o maven.zip && \
|
||||
unzip maven.zip -d $SRC/maven && \
|
||||
rm -rf maven.zip
|
||||
ENV MVN $SRC/maven/apache-maven-3.6.3/bin/mvn
|
||||
RUN git clone --depth 1 https://github.com/mariadb-corporation/mariadb-connector-j mariadb-connector-j
|
||||
COPY *.sh *.java $SRC/
|
||||
WORKDIR $SRC/mariadb-connector-j
|
||||
|
|
@ -0,0 +1,51 @@
|
|||
// Copyright 2023 Google LLC
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
//
|
||||
///////////////////////////////////////////////////////////////////////////
|
||||
import com.code_intelligence.jazzer.api.FuzzedDataProvider;
|
||||
import java.sql.SQLException;
|
||||
import org.mariadb.jdbc.MariaDbPoolDataSource;
|
||||
|
||||
// Generated with https://github.com/ossf/fuzz-introspector/tree/main/tools/auto-fuzz
|
||||
// Minor modifications to beautify code and ensure exception is caught.
|
||||
// jvm-autofuzz-heuristics-11
|
||||
// Heuristic name: jvm-autofuzz-heuristics-11
|
||||
// Target method: [org.mariadb.jdbc.MariaDbPoolDataSource] public <init>(java.lang.String) throws java.sql.SQLException
|
||||
// Target method: [org.mariadb.jdbc.MariaDbPoolDataSource] public getConnection(java.lang.String,java.lang.String) throws java.sql.SQLException
|
||||
// Target method: [org.mariadb.jdbc.MariaDbPoolDataSource] public getXAConnection(java.lang.String,java.lang.String) throws java.sql.SQLException
|
||||
// Target method: [org.mariadb.jdbc.MariaDbPoolDataSource] public getPooledConnection(java.lang.String,java.lang.String) throws java.sql.SQLException
|
||||
public class MariaDbPoolDataSourceFuzzer {
|
||||
public static void fuzzerTestOneInput(FuzzedDataProvider data) {
|
||||
try {
|
||||
String p1 = data.consumeString(100);
|
||||
String p2 = data.consumeString(100);
|
||||
Integer choice = data.consumeInt(1, 3);
|
||||
MariaDbPoolDataSource obj = new MariaDbPoolDataSource(data.consumeRemainingAsString());
|
||||
|
||||
switch (choice) {
|
||||
case 1:
|
||||
obj.getConnection(p1, p2);
|
||||
break;
|
||||
case 2:
|
||||
obj.getXAConnection(p1, p2);
|
||||
break;
|
||||
case 3:
|
||||
obj.getPooledConnection(p1, p2);
|
||||
break;
|
||||
}
|
||||
} catch (SQLException e1) {
|
||||
// Known exception
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,59 @@
|
|||
#!/bin/bash -eu
|
||||
# Copyright 2023 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
##########################################################################
|
||||
$MVN clean package -Dmaven.javadoc.skip=true -DskipTests=true -Dpmd.skip=true \
|
||||
-Dencoding=UTF-8 -Dmaven.antrun.skip=true -Dcheckstyle.skip=true \
|
||||
-DperformRelease=True org.apache.maven.plugins:maven-shade-plugin:3.2.4:shade
|
||||
CURRENT_VERSION=$($MVN org.apache.maven.plugins:maven-help-plugin:3.2.0:evaluate \
|
||||
-Dexpression=project.version -q -DforceStdout)
|
||||
|
||||
cp "./target/mariadb-java-client-$CURRENT_VERSION.jar" $OUT/mariadb.jar
|
||||
|
||||
ALL_JARS='mariadb.jar'
|
||||
|
||||
# The classpath at build-time includes the project jars in $OUT as well as the
|
||||
# Jazzer API.
|
||||
BUILD_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "$OUT/%s:"):$JAZZER_API_PATH
|
||||
|
||||
# All .jar and .class files lie in the same directory as the fuzzer at runtime.
|
||||
RUNTIME_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "\$this_dir/%s:"):\$this_dir
|
||||
|
||||
for fuzzer in $(find $SRC -name '*Fuzzer.java')
|
||||
do
|
||||
fuzzer_basename=$(basename -s .java $fuzzer)
|
||||
javac -cp $BUILD_CLASSPATH $fuzzer
|
||||
cp $SRC/$fuzzer_basename.class $OUT/
|
||||
|
||||
# Create an execution wrapper that executes Jazzer with the correct arguments.
|
||||
echo "#!/bin/bash
|
||||
# LLVMFuzzerTestOneInput for fuzzer detection.
|
||||
this_dir=\$(dirname "\$0")
|
||||
if [[ "\$@" =~ (^| )-runs=[0-9]+($| ) ]]
|
||||
then
|
||||
mem_settings='-Xmx1900m:-Xss900k'
|
||||
else
|
||||
mem_settings='-Xmx2048m:-Xss1024k'
|
||||
fi
|
||||
LD_LIBRARY_PATH="$JVM_LD_LIBRARY_PATH":\$this_dir \
|
||||
\$this_dir/jazzer_driver \
|
||||
--agent_path=\$this_dir/jazzer_agent_deploy.jar \
|
||||
--cp=$RUNTIME_CLASSPATH \
|
||||
--target_class=$fuzzer_basename \
|
||||
--jvm_args="\$mem_settings" \
|
||||
\$@" > $OUT/$fuzzer_basename
|
||||
|
||||
chmod u+x $OUT/$fuzzer_basename
|
||||
done
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
homepage: https://github.com/mariadb-corporation/mariadb-connector-j
|
||||
main_repo: https://github.com/mariadb-corporation/mariadb-connector-j
|
||||
language: jvm
|
||||
fuzzing_engines:
|
||||
- libfuzzer
|
||||
sanitizers:
|
||||
- address
|
||||
vendor_ccs:
|
||||
- david@adalogics.com
|
||||
- adam@adalogics.com
|
||||
- arthur.chan@adalogics.com
|
||||
Loading…
Reference in New Issue