mirror of https://github.com/google/oss-fuzz.git
[karchive] New project: karchive (#2318)
This commit is contained in:
tsdgeos
Max Moroz
parent
4fba752cc3
commit
d2f7690886
|
|
@ -0,0 +1,31 @@
|
|||
# Copyright 2019 Google Inc.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
################################################################################
|
||||
|
||||
FROM gcr.io/oss-fuzz-base/base-builder
|
||||
MAINTAINER tsdgeos@gmail.com
|
||||
RUN apt-get update && apt-get install --yes cmake make autoconf automake autopoint libtool wget
|
||||
RUN git clone --depth 1 https://github.com/madler/zlib.git
|
||||
RUN git clone --depth 1 https://github.com/nih-at/libzip.git
|
||||
RUN wget https://sourceware.org/pub/bzip2/bzip2-1.0.6.tar.gz
|
||||
RUN git clone https://git.tukaani.org/xz.git
|
||||
RUN git clone --depth 1 git://code.qt.io/qt/qtbase.git
|
||||
RUN git clone --depth 1 git://anongit.kde.org/extra-cmake-modules
|
||||
RUN git clone --depth 1 git://anongit.kde.org/karchive
|
||||
COPY build.sh $SRC
|
||||
COPY karchive_fuzzer.cc $SRC
|
||||
WORKDIR karchive
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,86 @@
|
|||
#!/bin/bash -eu
|
||||
# Copyright 2019 Google Inc.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
################################################################################
|
||||
|
||||
# Build zlib
|
||||
cd $SRC
|
||||
cd zlib
|
||||
./configure --static
|
||||
make install -j$(nproc)
|
||||
|
||||
# Build libzip
|
||||
cd $SRC
|
||||
cd libzip
|
||||
cmake . -DBUILD_SHARED_LIBS=OFF
|
||||
make install -j$(nproc)
|
||||
|
||||
# Build bzip2
|
||||
# Inspired from ../bzip2/build
|
||||
cd $SRC
|
||||
tar xzf bzip2-*.tar.gz && rm -f bzip2-*.tar.gz
|
||||
cd bzip2-*
|
||||
SRCL=(blocksort.o huffman.o crctable.o randtable.o compress.o decompress.o bzlib.o)
|
||||
|
||||
for source in ${SRCL[@]}; do
|
||||
name=$(basename $source .o)
|
||||
$CC $CFLAGS -c ${name}.c
|
||||
done
|
||||
rm -f libbz2.a
|
||||
ar cq libbz2.a ${SRCL[@]}
|
||||
cp -f bzlib.h /usr/local/include
|
||||
cp -f libbz2.a /usr/local/lib
|
||||
|
||||
# Build xz
|
||||
cd $SRC
|
||||
cd xz
|
||||
./autogen.sh
|
||||
./configure --enable-static --disable-debug --disable-shared --disable-xz --disable-xzdec --disable-lzmainfo
|
||||
make install -j$(nproc)
|
||||
|
||||
# Build extra-cmake-modules
|
||||
cd $SRC
|
||||
cd extra-cmake-modules
|
||||
cmake .
|
||||
make install -j$(nproc)
|
||||
|
||||
# Build qtbase
|
||||
cd $SRC
|
||||
cd qtbase
|
||||
# add the flags to Qt build too, we may as well sanitize Qt too (and also fixes memory sanitizer build)
|
||||
sed -i -e "s/QMAKE_CXXFLAGS += -stdlib=libc++/QMAKE_CXXFLAGS += -stdlib=libc++ $CXXFLAGS/g" mkspecs/linux-clang-libc++/qmake.conf
|
||||
sed -i -e "s/QMAKE_LFLAGS += -stdlib=libc++/QMAKE_LFLAGS += -stdlib=libc++ -lpthread $CXXFLAGS/g" mkspecs/linux-clang-libc++/qmake.conf
|
||||
# make qmake compile faster TODO
|
||||
sed -i -e "s/MAKE\")/MAKE\" -j10)/g" configure
|
||||
# Disable compressing rcc files, triggers a warning in the memory sanitizer that i'm not sure is valid. TODO investigate properly
|
||||
sed -i -e "s/DEFINES += QT_RCC QT_NO_CAST_FROM_ASCII QT_NO_FOREACH/DEFINES += QT_NO_COMPRESS QT_RCC QT_NO_CAST_FROM_ASCII QT_NO_FOREACH/g" src/tools/rcc/rcc.pro
|
||||
# add QT_NO_WARNING_OUTPUT to make the output a bit cleaner by not containing lots of QBuffer::seek: Invalid pos
|
||||
sed -i -e "s/DEFINES += QT_NO_USING_NAMESPACE QT_NO_FOREACH/DEFINES += QT_NO_USING_NAMESPACE QT_NO_FOREACH QT_NO_WARNING_OUTPUT/g" src/corelib/corelib.pro
|
||||
./configure --glib=no --libpng=qt -opensource -confirm-license -static -no-opengl -no-icu -platform linux-clang-libc++ -v
|
||||
cd src
|
||||
../bin/qmake -o Makefile src.pro
|
||||
make sub-corelib -j$(nproc)
|
||||
|
||||
# Build karchive
|
||||
cd $SRC
|
||||
cd karchive
|
||||
cmake . -DBUILD_SHARED_LIBS=OFF -DQt5Core_DIR=$SRC/qtbase/lib/cmake/Qt5Core/ -DBUILD_TESTING=OFF
|
||||
make install -j$(nproc)
|
||||
|
||||
# Build karchive_fuzzer
|
||||
$CXX $CXXFLAGS -fPIC -std=c++11 $SRC/karchive_fuzzer.cc -o $OUT/karchive_fuzzer -I $SRC/qtbase/include/QtCore/ -I $SRC/qtbase/include/ -I $SRC/qtbase/include//QtGui -I $SRC/qtbase/mkspecs/linux-clang-libc++/ -I /usr/local/include/KF5/KArchive -L $SRC/qtbase/lib -lQt5Core -lm -lqtpcre2 -ldl -lpthread -lFuzzingEngine /usr/local/lib/libzip.a /usr/local/lib/libz.a -lKF5Archive /usr/local/lib/libbz2.a -llzma -lQt5Core
|
||||
|
||||
cd $SRC
|
||||
find . -name "*.gz" -o -name "*.zip" -o -name "*.xz" -o -name "*.tar" | zip -q $OUT/karchive_fuzzer_seed_corpus.zip -@
|
||||
|
|
@ -0,0 +1,59 @@
|
|||
/*
|
||||
# Copyright 2019 Google Inc.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
################################################################################
|
||||
*/
|
||||
|
||||
/*
|
||||
Usage:
|
||||
python infra/helper.py build_image karchive
|
||||
python infra/helper.py build_fuzzers --sanitizer undefined|address|memory karchive
|
||||
python infra/helper.py run_fuzzer karchive karchive_fuzzer
|
||||
*/
|
||||
|
||||
|
||||
#include <QBuffer>
|
||||
#include <QCoreApplication>
|
||||
#include <QVector>
|
||||
|
||||
#include <KF5/KArchive/k7zip.h>
|
||||
#include <KF5/KArchive/ktar.h>
|
||||
#include <KF5/KArchive/kzip.h>
|
||||
#include <KF5/KArchive/kar.h>
|
||||
|
||||
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
|
||||
{
|
||||
int argc = 0;
|
||||
QCoreApplication a(argc, nullptr);
|
||||
|
||||
QBuffer b;
|
||||
b.setData((const char *)data, size);
|
||||
|
||||
const QVector<KArchive*> handlers = {
|
||||
new K7Zip(&b),
|
||||
new KTar(&b),
|
||||
new KZip(&b),
|
||||
new KAr(&b)
|
||||
};
|
||||
|
||||
for (KArchive *h : handlers) {
|
||||
h->open(QIODevice::ReadOnly);
|
||||
h->close();
|
||||
}
|
||||
|
||||
qDeleteAll(handlers);
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
homepage: https://cgit.kde.org/karchive.git/
|
||||
primary_contact: tsdgeos@gmail.com
|
||||
sanitizers:
|
||||
- address
|
||||
- memory
|
||||
- undefined
|
||||
Loading…
Reference in New Issue