diff --git a/projects/serde_json/Dockerfile b/projects/serde_json/Dockerfile new file mode 100644 index 000000000..c2794085f --- /dev/null +++ b/projects/serde_json/Dockerfile @@ -0,0 +1,27 @@ +# Copyright 2020 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ +FROM gcr.io/oss-fuzz-base/base-builder +MAINTAINER david@adalogics.com +RUN apt-get update && apt-get install -y make autoconf automake libtool curl cmake python llvm-dev libclang-dev clang + +ENV CARGO_HOME=/rust RUSTUP_HOME=/rust/rustup PATH=$PATH:/rust/bin +RUN curl https://sh.rustup.rs | sh -s -- -y --default-toolchain=nightly +RUN cargo install cargo-fuzz + +RUN git clone --depth 1 https://github.com/serde-rs/json json +WORKDIR $SRC + +COPY build.sh $SRC/ diff --git a/projects/serde_json/build.sh b/projects/serde_json/build.sh new file mode 100755 index 000000000..76960bf1f --- /dev/null +++ b/projects/serde_json/build.sh @@ -0,0 +1,31 @@ +#!/bin/bash -eu +# Copyright 2020 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +# Note: This project creates Rust fuzz targets exclusively +export CUSTOM_LIBFUZZER_PATH="$LIB_FUZZING_ENGINE_DEPRECATED" +export CUSTOM_LIBFUZZER_STD_CXX=c++ + +# Because Rust does not support sanitizers via CFLAGS/CXXFLAGS, the environment +# variables are overridden with values from base-images/base-clang only +export CFLAGS="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION" +export CXXFLAGS_EXTRA="-stdlib=libc++" +export CXXFLAGS="$CFLAGS $CXXFLAGS_EXTRA" +export RUSTFLAGS="-Cdebuginfo=1 -Cforce-frame-pointers" + +cd $SRC/json +cargo fuzz build -O +cp fuzz/target/x86_64-unknown-linux-gnu/release/from_slice $OUT/ diff --git a/projects/serde_json/project.yaml b/projects/serde_json/project.yaml new file mode 100644 index 000000000..f7b857183 --- /dev/null +++ b/projects/serde_json/project.yaml @@ -0,0 +1,9 @@ +homepage: "https://github.com/serde-rs/json" +primary_contact: "dtolnay@gmail.com" +sanitizers: + - address +fuzzing_engines: + - libfuzzer +language: rust +auto_ccs: + - "david@adalogics.com"