diff --git a/projects/istio-ztunnel/Dockerfile b/projects/istio-ztunnel/Dockerfile new file mode 100644 index 000000000..145d48307 --- /dev/null +++ b/projects/istio-ztunnel/Dockerfile @@ -0,0 +1,28 @@ +# Copyright 2023 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder-rust +RUN apt-get --yes update \ + && apt-get install --no-install-recommends --yes \ + librust-clang-sys-dev \ + protobuf-compiler \ + libprotobuf-dev \ + && apt-get clean \ + && rm --recursive --force /var/lib/apt/lists/* + +RUN git clone --depth 1 https://github.com/istio/ztunnel +COPY build.sh $SRC/ +WORKDIR $SRC/ztunnel diff --git a/projects/istio-ztunnel/build.sh b/projects/istio-ztunnel/build.sh new file mode 100644 index 000000000..25463c1ac --- /dev/null +++ b/projects/istio-ztunnel/build.sh @@ -0,0 +1,24 @@ +#!/bin/bash -eu +# Copyright 2023 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +cargo fuzz build --release --debug-assertions +FUZZ_TARGET_OUTPUT_DIR=out/rust/x86_64-unknown-linux-gnu/release +for f in fuzz/fuzz_targets/*.rs +do + FUZZ_TARGET_NAME=$(basename ${f%.*}) + cp $FUZZ_TARGET_OUTPUT_DIR/$FUZZ_TARGET_NAME $OUT/ +done diff --git a/projects/istio-ztunnel/project.yaml b/projects/istio-ztunnel/project.yaml new file mode 100644 index 000000000..fbb36efd6 --- /dev/null +++ b/projects/istio-ztunnel/project.yaml @@ -0,0 +1,12 @@ +homepage: "https://github.com/istio/ztunnel" +main_repo: 'https://github.com/istio/ztunnel' +primary_contact: "istio-security-vulnerability-reports@googlegroups.com" +auto_ccs : + - "adam@adalogics.com" + - "howardjohn@google.com" + - "gregory.hanson@solo.io" +language: rust +fuzzing_engines: + - libfuzzer +sanitizers: + - address