Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update reproducing.md

This commit is contained in:
Abhishek Arya 2017-02-02 19:02:51 -08:00 committed by GitHub
parent c90ad0fee2
commit 86f10d7f32
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/reproducing.md
View File

@ -31,24 +31,25 @@ to replicate the exact build steps used by OSS-Fuzz and then feed the reproducer
- *Reproduce using latest OSS-Fuzz build:* - *Reproduce using latest OSS-Fuzz build:*
```bash ```bash
$ python infra/helper.py build_fuzzers $PROJECT_NAME $ python infra/helper.py build_fuzzers -e SANITIZER=<address/memory/undefined> $PROJECT_NAME
$ python infra/helper.py reproduce $PROJECT_NAME <fuzz_target_name> <testcase_path> $ python infra/helper.py reproduce $PROJECT_NAME <fuzz_target_name> <testcase_path>
``` ```
It builds the fuzzer from the most recent successful OSS-Fuzz build (usually last night's sources) It builds the fuzzer from the most recent successful OSS-Fuzz build (usually last night's sources)
and feeds the testcase file to the target function. and feeds the testcase file to the target function.
E.g. for [libxml2](../projects/libxml2) project with fuzzer named `libxml2_xml_read_memory_fuzzer`, it will be: E.g. for building [libxml2](../projects/libxml2) project with UndefinedBehaviorSanitizer instrumentation
and reproduce a crash testcase for a fuzzer named `libxml2_xml_read_memory_fuzzer`, it will be:
```bash ```bash
$ python infra/helper.py build_fuzzers libxml2 $ python infra/helper.py build_fuzzers -e SANITIZER=undefined libxml2
$ python infra/helper.py reproduce libxml2 libxml2_xml_read_memory_fuzzer ~/Downloads/testcase $ python infra/helper.py reproduce libxml2 libxml2_xml_read_memory_fuzzer ~/Downloads/testcase
``` ```
- *Reproduce using local source checkout:* - *Reproduce using local source checkout:*
```bash ```bash
$ python infra/helper.py build_fuzzers $PROJECT_NAME <source_path> $ python infra/helper.py build_fuzzers -e SANITIZER=<address/memory/undefined> $PROJECT_NAME <source_path>
$ python infra/helper.py reproduce $PROJECT_NAME <fuzz_target_name> <testcase_path> $ python infra/helper.py reproduce $PROJECT_NAME <fuzz_target_name> <testcase_path>
``` ```