From a676448e804ce19ae63370c4c0aed83e40333fcd Mon Sep 17 00:00:00 2001 From: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com> Date: Tue, 18 May 2021 21:24:19 +0100 Subject: [PATCH] [vlc] Initial integration (#5598) * [vlc] Initial integration * Small fixes * update packages. * Compile existing fuzzers. * updated setup to work with static builds. * Cleanup. * no more string fuzzer. * typo. * updated the project yaml. Co-authored-by: davkor --- projects/vlc/Dockerfile | 22 ++++++++++++++++ projects/vlc/build.sh | 53 +++++++++++++++++++++++++++++++++++++++ projects/vlc/project.yaml | 10 ++++++++ 3 files changed, 85 insertions(+) create mode 100644 projects/vlc/Dockerfile create mode 100755 projects/vlc/build.sh create mode 100644 projects/vlc/project.yaml diff --git a/projects/vlc/Dockerfile b/projects/vlc/Dockerfile new file mode 100644 index 000000000..6d24f0254 --- /dev/null +++ b/projects/vlc/Dockerfile @@ -0,0 +1,22 @@ +# Copyright 2021 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder +RUN apt-get update && apt-get install -y make autoconf automake libtool \ + pkg-config cmake flex bison gettext libglu1-mesa-dev +RUN git clone --depth 1 https://github.com/videolan/vlc vlc +WORKDIR vlc +COPY build.sh $SRC/ diff --git a/projects/vlc/build.sh b/projects/vlc/build.sh new file mode 100755 index 000000000..8eb7053a1 --- /dev/null +++ b/projects/vlc/build.sh @@ -0,0 +1,53 @@ +#!/bin/bash -eu +# Copyright 2021 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +# Use OSS-Fuzz environment rather than hardcoded setup. +sed -i 's/-fsanitize-coverage=trace-pc-guard//g' ./configure.ac +sed -i 's/-fsanitize-coverage=trace-cmp//g' ./configure.ac +sed -i 's/-fsanitize-coverage=trace-pc//g' ./configure.ac +sed -i 's/-lFuzzer//g' ./configure.ac + +# In order to build statically we avoid libxml and ogg plugins. +sed -i 's/..\/..\/lib\/libvlc_internal.h/lib\/libvlc_internal.h/g' ./test/src/input/decoder.c +sed -i 's/..\/modules\/libxml_plugin.la//g' ./test/Makefile.am +sed -i 's/..\/modules\/libogg_plugin.la//g' ./test/Makefile.am +sed -i 's/f(misc_xml_xml)//g' ./test/src/input/demux-run.c +sed -i 's/f(demux_ogg)//g' ./test/src/input/demux-run.c + +# Ensure that we compile with the correct link flags. +RULE="vlc_demux_libfuzzer_LDADD" +FUZZ_LDFLAGS="vlc_demux_libfuzzer_LDFLAGS=\${LIB_FUZZING_ENGINE}" +sed -i "s/${RULE}/${FUZZ_LDFLAGS}\n${RULE}/g" ./test/Makefile.am + +RULE="vlc_demux_dec_libfuzzer_LDADD" +FUZZ_LDFLAGS="vlc_demux_dec_libfuzzer_LDFLAGS=\${LIB_FUZZING_ENGINE}" +sed -i "s/${RULE}/${FUZZ_LDFLAGS}\n${RULE}/g" ./test/Makefile.am + +./bootstrap +./configure --disable-ogg --disable-oggspots --disable-libxml2 --disable-lua \ + --disable-shared \ + --enable-static \ + --enable-vlc=no \ + --disable-avcodec \ + --disable-swscale \ + --disable-a52 \ + --disable-xcb \ + --disable-alsa \ + --with-libfuzzer +make V=1 -j$(nproc) +cp ./test/vlc-demux-dec-libfuzzer $OUT/ +cp ./test/vlc-demux-libfuzzer $OUT/ diff --git a/projects/vlc/project.yaml b/projects/vlc/project.yaml new file mode 100644 index 000000000..1006c84e7 --- /dev/null +++ b/projects/vlc/project.yaml @@ -0,0 +1,10 @@ +homepage: "https://github.com/videolan/vlc" +language: c +primary_contact: "ossfuzz@videolan.org" +auto_ccs: + - "adam@adalogics.com" + - "david@adalogics.com" +sanitizers: + - address + - undefined +main_repo: 'https://github.com/videolan/vlc'