Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[docs] Deprecate use of max_len, recommend sanity check that returns 0 (cc #1324).

This commit is contained in:
Max Moroz 2018-04-17 15:33:27 -07:00
parent 2519639f73
commit b5833a7826
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/new_project_guide.md
View File

@ -204,10 +204,18 @@ custom options by creating a `my_fuzzer.options` file next to a `my_fuzzer` exec
``` ```
[libfuzzer] [libfuzzer]
max_len = 1024 close_fd_mask = 3
only_ascii = 1
``` ```
[List of available options](http://llvm.org/docs/LibFuzzer.html#options). Use of `max_len` is highly recommended. [List of available options](http://llvm.org/docs/LibFuzzer.html#options). Use of `max_len` is not recommended as other fuzzing engines may not support that option. Instead, if
you need to strictly enforce the input length limit, add a sanity check to the
beginning of your fuzz target:
```cpp
if (size < kMinInputLength || size > kMaxInputLength)
return 0;
```
For out of tree [fuzz targets](glossary.md#fuzz-target), you will likely add options file using docker's For out of tree [fuzz targets](glossary.md#fuzz-target), you will likely add options file using docker's
`COPY` directive and will copy it into output in build script. `COPY` directive and will copy it into output in build script.