mirror of https://github.com/google/oss-fuzz.git
[apache-commons-logging] Initial Integration (#8362)
This commit is contained in:
aschaich
GitHub
parent
5675ec6958
commit
befe610a4d
|
|
@ -0,0 +1,34 @@
|
|||
# Copyright 2022 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
################################################################################
|
||||
|
||||
FROM gcr.io/oss-fuzz-base/base-builder-jvm
|
||||
|
||||
RUN curl -L https://downloads.apache.org/maven/maven-3/3.6.3/binaries/apache-maven-3.6.3-bin.zip -o maven.zip && \
|
||||
unzip maven.zip -d $SRC/maven && \
|
||||
rm -rf maven.zip
|
||||
|
||||
ENV MVN $SRC/maven/apache-maven-3.6.3/bin/mvn
|
||||
|
||||
RUN git clone https://github.com/apache/commons-logging
|
||||
|
||||
RUN curl 'https://dlcdn.apache.org/logging/log4j/2.18.0/apache-log4j-2.18.0-bin.tar.gz' -o apache-log4j-2.18.0-bin.tar.gz && \
|
||||
tar xf apache-log4j-2.18.0-bin.tar.gz && \
|
||||
unlink apache-log4j-2.18.0-bin.tar.gz
|
||||
|
||||
COPY build.sh $SRC/
|
||||
COPY *.java *.xml $SRC/
|
||||
COPY Package $SRC/Package/
|
||||
WORKDIR $SRC/commons-logging
|
||||
|
|
@ -0,0 +1,51 @@
|
|||
// Copyright 2022 Google LLC
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
//
|
||||
////////////////////////////////////////////////////////////////////////////////
|
||||
|
||||
import com.code_intelligence.jazzer.api.FuzzedDataProvider;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
|
||||
public class LoggingBasicFuzzer {
|
||||
public LoggingBasicFuzzer(FuzzedDataProvider data) {
|
||||
}
|
||||
|
||||
void runTest(FuzzedDataProvider data) {
|
||||
Log logger = LogFactory.getLog(LoggingBasicFuzzer.class);
|
||||
|
||||
logger.isDebugEnabled();
|
||||
logger.isErrorEnabled();
|
||||
logger.isFatalEnabled();
|
||||
logger.isInfoEnabled();
|
||||
logger.isTraceEnabled();
|
||||
logger.isWarnEnabled();
|
||||
logger.debug(data.consumeString(10));
|
||||
logger.error(data.consumeString(10));
|
||||
logger.fatal(data.consumeString(10));
|
||||
logger.info(data.consumeString(10));
|
||||
logger.warn(data.consumeString(10));
|
||||
logger.debug(data.consumeString(10), new NullPointerException());
|
||||
logger.error(data.consumeString(10), new NullPointerException());
|
||||
logger.fatal(data.consumeString(10), new NullPointerException());
|
||||
logger.info(data.consumeString(10), new NullPointerException());
|
||||
logger.warn(data.consumeString(10), new NullPointerException());
|
||||
}
|
||||
|
||||
public static void fuzzerTestOneInput(FuzzedDataProvider data) {
|
||||
LoggingBasicFuzzer testClosure = new LoggingBasicFuzzer(data);
|
||||
testClosure.runTest(data);
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,37 @@
|
|||
package Package;
|
||||
|
||||
import java.time.Instant;
|
||||
import java.util.concurrent.ConcurrentHashMap;
|
||||
import java.util.concurrent.ConcurrentMap;
|
||||
|
||||
import org.apache.logging.log4j.Level;
|
||||
import org.apache.logging.log4j.core.Appender;
|
||||
import org.apache.logging.log4j.core.Core;
|
||||
import org.apache.logging.log4j.core.Filter;
|
||||
import org.apache.logging.log4j.core.LogEvent;
|
||||
import org.apache.logging.log4j.core.appender.AbstractAppender;
|
||||
import org.apache.logging.log4j.core.config.plugins.Plugin;
|
||||
import org.apache.logging.log4j.core.config.plugins.PluginAttribute;
|
||||
import org.apache.logging.log4j.core.config.plugins.PluginElement;
|
||||
import org.apache.logging.log4j.core.config.plugins.PluginFactory;
|
||||
|
||||
@Plugin(
|
||||
name = "MyAppender",
|
||||
category = Core.CATEGORY_NAME,
|
||||
elementType = Appender.ELEMENT_TYPE)
|
||||
public class MyAppender extends AbstractAppender {
|
||||
public MyAppender(String name, Filter filter) {
|
||||
super(name, filter, null);
|
||||
}
|
||||
|
||||
@PluginFactory
|
||||
public static MyAppender createAppender(
|
||||
@PluginAttribute("name") String name,
|
||||
@PluginElement("Filter") Filter filter) {
|
||||
return new MyAppender(name, filter);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void append(LogEvent event) {
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,64 @@
|
|||
#!/bin/bash -eu
|
||||
# Copyright 2022 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
################################################################################
|
||||
|
||||
|
||||
MAVEN_ARGS="-Djavac.src.version=15 -Djavac.target.version=15 -DskipTests -Drat.ignoreErrors=true"
|
||||
|
||||
ALL_JARS=""
|
||||
|
||||
pushd "${SRC}/commons-logging"
|
||||
$MVN package $MAVEN_ARGS
|
||||
CURRENT_VERSION=$($MVN org.apache.maven.plugins:maven-help-plugin:3.2.0:evaluate \
|
||||
-Dexpression=project.version -q -DforceStdout)
|
||||
cp -v target/commons-logging-${CURRENT_VERSION}.jar "$OUT/commons-logging.jar"
|
||||
ALL_JARS="${ALL_JARS} commons-logging.jar"
|
||||
popd
|
||||
|
||||
for jarFile in ${SRC}/apache-log4j-2.18.0-bin/log4j-api-2.18.0.jar ${SRC}/apache-log4j-2.18.0-bin/log4j-core-2.18.0.jar ${SRC}/apache-log4j-2.18.0-bin/log4j-1.2-api-2.18.0.jar ; do
|
||||
cp -v ${jarFile} "$OUT/$(basename ${jarFile})"
|
||||
ALL_JARS="${ALL_JARS} $(basename ${jarFile})"
|
||||
done
|
||||
|
||||
# The classpath at build-time includes the project jars in $OUT as well as the
|
||||
# Jazzer API.
|
||||
BUILD_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "$OUT/%s:"):$JAZZER_API_PATH
|
||||
|
||||
# All .jar and .class files lie in the same directory as the fuzzer at runtime.
|
||||
RUNTIME_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "\$this_dir/%s:"):\$this_dir
|
||||
|
||||
# compile all java files and copy them to $OUT
|
||||
javac -cp $SRC:$BUILD_CLASSPATH -g $SRC/*.java $SRC/Package/*.java
|
||||
mkdir -p $OUT/Package
|
||||
cp -vr $SRC/Package/*.class $OUT/Package
|
||||
cp -v $SRC/*.class $OUT/
|
||||
cp -v $SRC/*.xml $OUT/
|
||||
|
||||
for fuzzer in $(find $SRC -name '*Fuzzer.java'); do
|
||||
fuzzer_basename=$(basename -s .java $fuzzer)
|
||||
|
||||
# Create an execution wrapper that executes Jazzer with the correct arguments.
|
||||
echo "#!/bin/sh
|
||||
# LLVMFuzzerTestOneInput for fuzzer detection.
|
||||
this_dir=\$(dirname \"\$0\")
|
||||
LD_LIBRARY_PATH=\"$JVM_LD_LIBRARY_PATH\":\$this_dir \
|
||||
\$this_dir/jazzer_driver --agent_path=\$this_dir/jazzer_agent_deploy.jar \
|
||||
--cp=$RUNTIME_CLASSPATH \
|
||||
--target_class=$fuzzer_basename \
|
||||
--jvm_args=\"-Xmx2048m\" \
|
||||
\$@" > $OUT/$fuzzer_basename
|
||||
chmod u+x $OUT/$fuzzer_basename
|
||||
done
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<Configuration status="trace" packages="Package" strict="true">
|
||||
<Appenders>
|
||||
<MyAppender name="x" />
|
||||
</Appenders>
|
||||
<Loggers>
|
||||
<Root level="trace">
|
||||
<AppenderRef ref="x" />
|
||||
</Root>
|
||||
</Loggers>
|
||||
</Configuration>
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
homepage: https://commons.apache.org/proper/commons-collections/
|
||||
language: jvm
|
||||
main_repo: https://gitbox.apache.org/repos/asf/commons-logging.git
|
||||
fuzzing_engines:
|
||||
- libfuzzer
|
||||
sanitizers:
|
||||
- address
|
||||
vendor_ccs:
|
||||
- "wagner@code-intelligence.com"
|
||||
- "yakdan@code-intelligence.com"
|
||||
- "glendowne@code-intelligence.com"
|
||||
- "patrice.salathe@code-intelligence.com"
|
||||
- "hlin@code-intelligence.com"
|
||||
- "schaich@code-intelligence.com"
|
||||
Loading…
Reference in New Issue