diff --git a/projects/jline3/Dockerfile b/projects/jline3/Dockerfile new file mode 100644 index 000000000..6151b01cc --- /dev/null +++ b/projects/jline3/Dockerfile @@ -0,0 +1,28 @@ +# Copyright 2023 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder-jvm + +RUN git clone --depth 1 https://github.com/jline/jline3 $SRC/jline3 + +RUN curl -L https://downloads.apache.org/maven/maven-3/3.8.7/binaries/apache-maven-3.8.7-bin.zip -o maven.zip && \ + unzip maven.zip -d $SRC/maven && \ + rm -rf maven.zip +ENV MVN $SRC/maven/apache-maven-3.8.7/bin/mvn + +COPY build.sh $SRC/ +COPY *Fuzzer.java $SRC/ +WORKDIR $SRC/jline3 \ No newline at end of file diff --git a/projects/jline3/LineReaderFuzzer.java b/projects/jline3/LineReaderFuzzer.java new file mode 100644 index 000000000..1fba97412 --- /dev/null +++ b/projects/jline3/LineReaderFuzzer.java @@ -0,0 +1,75 @@ +// Copyright 2023 Google LLC +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. +// + +import com.code_intelligence.jazzer.api.FuzzedDataProvider; +import org.jline.builtins.ConfigurationPath; +import org.jline.builtins.SyntaxHighlighter; +import org.jline.console.impl.SystemHighlighter; +import org.jline.reader.*; +import org.jline.reader.impl.DefaultHighlighter; +import org.jline.reader.impl.DefaultParser; +import org.jline.terminal.Size; +import org.jline.terminal.Terminal; +import org.jline.terminal.TerminalBuilder; + +import java.lang.IllegalArgumentException; + +import java.io.*; +import java.nio.file.Files; +import java.nio.file.Path; + +public class LineReaderFuzzer { + public static void fuzzerTestOneInput(FuzzedDataProvider data) { + InputStream in = new ByteArrayInputStream(data.consumeBytes(500)); + OutputStream out = new ByteArrayOutputStream(); + Path nanorc; + try { + nanorc = LineReaderFuzzer.generateNanorcFile(data); + } catch (IOException e) { + throw new RuntimeException(e); + } + SyntaxHighlighter syntaxHighlighter = SyntaxHighlighter.build(nanorc,data.consumeString(50)); + SyntaxHighlighter argsHighlighter = SyntaxHighlighter.build(nanorc,data.consumeString(50)); + SyntaxHighlighter groovyHighlighter = SyntaxHighlighter.build(nanorc,data.consumeString(50)); + + SystemHighlighter highlighter = new SystemHighlighter(syntaxHighlighter, argsHighlighter, groovyHighlighter); + highlighter.addFileHighlight(data.consumeString(50), data.consumeString(50)); + + try { + Terminal terminal = TerminalBuilder.builder() + .system(data.consumeBoolean()) + .streams(in, out) + .name(data.consumeString(100)) + .jna(data.consumeBoolean()) + .build(); + terminal.setSize(new Size(data.consumeInt(0, 1000), data.consumeInt(0, 1000))); + + LineReader reader = LineReaderBuilder.builder() + .terminal(terminal) + .highlighter(highlighter) + .parser(new DefaultParser()) + .variable(data.consumeString(50), data.consumeString(50)) + .build(); + + reader.readLine(data.consumeString(500), data.consumeChar()); + } catch (IOException | EndOfFileException | IllegalArgumentException | UserInterruptException e) {} + } + + public static Path generateNanorcFile(FuzzedDataProvider data) throws IOException { + Path nanorc = Files.createTempFile("nanorc", ""); + Files.write(nanorc, data.consumeBytes(500)); + return nanorc; + } +} diff --git a/projects/jline3/build.sh b/projects/jline3/build.sh new file mode 100644 index 000000000..ab1fb8793 --- /dev/null +++ b/projects/jline3/build.sh @@ -0,0 +1,56 @@ +#!/bin/bash -eu +# Copyright 2023 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + + +CURRENT_VERSION=$($MVN org.apache.maven.plugins:maven-help-plugin:3.2.0:evaluate \ +-Dexpression=project.version -q -DforceStdout) + +$MVN package -DskipTests -Dmaven.test.skip=true -Dmaven.javadoc.skip=true + +cp "$SRC/jline3/jline/target/jline-$CURRENT_VERSION.jar" $OUT/ + +ALL_JARS=$(find $OUT/ -name *.jar ! -name jazzer*.jar -printf "%f ") + +# The classpath at build-time includes the project jars in $OUT as well as the +# Jazzer API. +BUILD_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "$OUT/%s:"):$JAZZER_API_PATH + +# All .jar and .class files lie in the same directory as the fuzzer at runtime. +RUNTIME_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "\$this_dir/%s:"):\$this_dir + +for fuzzer in $(find $SRC -name '*Fuzzer.java'); do + fuzzer_basename=$(basename -s .java $fuzzer) + javac -cp $BUILD_CLASSPATH $fuzzer + cp $SRC/*.class $OUT/ + + # Create an execution wrapper that executes Jazzer with the correct arguments. + echo "#!/bin/bash +# LLVMFuzzerTestOneInput for fuzzer detection. +this_dir=\$(dirname \"\$0\") +if [[ \"\$@\" =~ (^| )-runs=[0-9]+($| ) ]]; then + mem_settings='-Xmx1900m:-Xss900k' +else + mem_settings='-Xmx2048m:-Xss1024k' +fi +LD_LIBRARY_PATH=\"$JVM_LD_LIBRARY_PATH\":\$this_dir \ +\$this_dir/jazzer_driver --agent_path=\$this_dir/jazzer_agent_deploy.jar \ +--cp=$RUNTIME_CLASSPATH \ +--target_class=$fuzzer_basename \ +--jvm_args=\"\$mem_settings\" \ +\$@" > $OUT/$fuzzer_basename + chmod u+x $OUT/$fuzzer_basename +done \ No newline at end of file diff --git a/projects/jline3/project.yaml b/projects/jline3/project.yaml new file mode 100644 index 000000000..e975167a3 --- /dev/null +++ b/projects/jline3/project.yaml @@ -0,0 +1,9 @@ +homepage: "https://github.com/jline/jline3" +language: jvm +fuzzing_engines: + - libfuzzer +main_repo: "https://github.com/jline/jline3" +sanitizers: + - address +vendor_ccs: + - "bug-disclosure@code-intelligence.com" \ No newline at end of file