From c69f27916991b6cde7b20772ca5a96863b4ef67b Mon Sep 17 00:00:00 2001 From: Kostya Serebryany Date: Wed, 12 Oct 2016 20:45:44 -0700 Subject: [PATCH] pcre2 fuzzer (#24) --- pcre2/Dockerfile | 21 +++++++++++++++++++++ pcre2/Jenkinsfile | 23 +++++++++++++++++++++++ pcre2/build.sh | 33 +++++++++++++++++++++++++++++++++ pcre2/pcre2_fuzzer.cc | 21 +++++++++++++++++++++ 4 files changed, 98 insertions(+) create mode 100644 pcre2/Dockerfile create mode 100644 pcre2/Jenkinsfile create mode 100755 pcre2/build.sh create mode 100644 pcre2/pcre2_fuzzer.cc diff --git a/pcre2/Dockerfile b/pcre2/Dockerfile new file mode 100644 index 000000000..ac0442ce5 --- /dev/null +++ b/pcre2/Dockerfile @@ -0,0 +1,21 @@ +# Copyright 2016 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM ossfuzz/base-libfuzzer +MAINTAINER kcc@google.com +RUN apt-get install -y make autoconf automake libtool subversion + +COPY build.sh /src/ diff --git a/pcre2/Jenkinsfile b/pcre2/Jenkinsfile new file mode 100644 index 000000000..987499d21 --- /dev/null +++ b/pcre2/Jenkinsfile @@ -0,0 +1,23 @@ +// Copyright 2016 Google Inc. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. +// +//////////////////////////////////////////////////////////////////////////////// + +def libfuzzerBuild = fileLoader.fromGit('infra/libfuzzer-pipeline.groovy', + 'https://github.com/google/oss-fuzz.git') + +libfuzzerBuild { + // the real source is in svn + git = "https://github.com/google/oss-fuzz.git" +} diff --git a/pcre2/build.sh b/pcre2/build.sh new file mode 100755 index 000000000..f7cb26279 --- /dev/null +++ b/pcre2/build.sh @@ -0,0 +1,33 @@ +#!/bin/bash -eu +# Copyright 2016 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +cd /src/pcre2 +svn co svn://vcs.exim.org/pcre2/code/trunk pcre2 +cd pcre2 + +# build the library. +./autogen.sh +SAVED_LDFLAGS="$LDFLAGS" +export LDFLAGS= # Can't use provided LDFLAGS to build pcre's .a targets. +./configure --enable-never-backslash-C --with-match-limit=1000 --with-match-limit-recursion=1000 +make clean all + +# Build the target. +$CXX $CXXFLAGS -std=c++11 -I src \ + /src/oss-fuzz/pcre2/pcre2_fuzzer.cc -o /out/pcre2_fuzzer \ + -Wl,--whole-archive .libs/*.a -Wl,-no-whole-archive $SAVED_LDFLAGS \ + /work/libfuzzer/*.o diff --git a/pcre2/pcre2_fuzzer.cc b/pcre2/pcre2_fuzzer.cc new file mode 100644 index 000000000..f6fb828a3 --- /dev/null +++ b/pcre2/pcre2_fuzzer.cc @@ -0,0 +1,21 @@ +// Copyright 2016 Google Inc. All Rights Reserved. +// Licensed under the Apache License, Version 2.0 (the "License"); + +#include +#include "pcre2posix.h" + +using std::string; + +extern "C" int LLVMFuzzerTestOneInput(const unsigned char *data, size_t size) { + if (size < 1) return 0; + regex_t preg; + string str(reinterpret_cast(data), size); + string pat(str); + int flags = data[size/2] - 'a'; // Make it 0 when the byte is 'a'. + if (0 == regcomp(&preg, pat.c_str(), flags)) { + regmatch_t pmatch[5]; + regexec(&preg, str.c_str(), 5, pmatch, 0); + regfree(&preg); + } + return 0; +}