pytz: initial integration (#7730)

* pytz: initial integration

* Catch highest pytz exception
This commit is contained in:
DavidKorczynski 2022-07-22 00:44:58 +01:00 committed by GitHub
parent 49ce84fb16
commit 33127a01cb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 118 additions and 0 deletions

22
projects/pytz/Dockerfile Normal file
View File

@ -0,0 +1,22 @@
# Copyright 2022 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
################################################################################
FROM gcr.io/oss-fuzz-base/base-builder-python
RUN apt-get update && apt-get install -y python3-distutils libpq-dev python3-wheel
RUN git clone https://github.com/stub42/pytz
RUN pip3 install wheel
COPY build.sh *.py $SRC/
WORKDIR pytz

29
projects/pytz/build.sh Normal file
View File

@ -0,0 +1,29 @@
#!/bin/bash -eu
# Copyright 2022 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
################################################################################
# Ensure usage of OSS-Fuzz python
sed -i "s/\/usr\/bin\/python/\/usr\/local\/bin\/python/g" Makefile
#pip3 install wheel
make
cd build/dist
python3 setup.py install
# Build flask fuzzers
for fuzzer in $(find $SRC -name 'fuzz_*.py'); do
compile_python_fuzzer $fuzzer
done

View File

@ -0,0 +1,55 @@
#!/usr/bin/python3
# Copyright 2022 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
import atheris
import sys
with atheris.instrument_imports():
import pytz
from datetime import datetime
from pytz.exceptions import Error
def TestOneInput(data):
fdp = atheris.FuzzedDataProvider(data)
try:
d1 = datetime(
fdp.ConsumeInt(4),
fdp.ConsumeInt(4),
fdp.ConsumeInt(4),
fdp.ConsumeInt(4),
fdp.ConsumeInt(4),
fdp.ConsumeInt(4)
)
except: # Catch everything
return
s1 = fdp.ConsumeString(sys.maxsize)
try:
east2 = pytz.timezone(s1)
east2.localize(d1)
except Error as e:
pass
def main():
atheris.instrument_all()
atheris.Setup(sys.argv, TestOneInput, enable_python_coverage=True)
atheris.Fuzz()
if __name__ == "__main__":
main()

View File

@ -0,0 +1,12 @@
fuzzing_engines:
- libfuzzer
homepage: https://github.com/stub42/pytz
language: python
main_repo: https://github.com/stub42/pytz
sanitizers:
- address
- undefined
vendor_ccs:
- david@adalogics.com
- adam@adalogics.com
- athur.chan@adalogics.com