botocore: initial integration (#9266)

Signed-off-by: David Korczynski <david@adalogics.com>

Signed-off-by: David Korczynski <david@adalogics.com>

projects/botocore/Dockerfile

@@ -0,0 +1,18 @@
+#!/usr/bin/python3
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+FROM gcr.io/oss-fuzz-base/base-builder-python
+RUN git clone --depth=1 https://github.com/boto/botocore botocore
+COPY *.sh *py $SRC/
+WORKDIR $SRC/botocore

projects/botocore/build.sh

@@ -0,0 +1,22 @@
+#!/bin/bash -eu
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+pip3 install .
+
+# Build fuzzers in $OUT.
+for fuzzer in $(find $SRC -name 'fuzz_*.py'); do
+  compile_python_fuzzer $fuzzer
+done

projects/botocore/fuzz_serialization.py

@@ -0,0 +1,81 @@
+#!/usr/bin/python3
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import sys
+import atheris
+
+import io
+import botocore
+from botocore import serialize
+from botocore.model import ServiceModel
+
+
+def TestOneInput(data):
+  fdp = atheris.FuzzedDataProvider(data)
+  protocols = [
+    'rest-xml', 'json', 'query'
+  ]
+  protocol_str = protocols[fdp.ConsumeIntInRange(0, len(protocols)-1)]
+
+  # Simple model with a single shape of type blob
+  model = {
+    'metadata': {'protocol': protocol_str, 'apiVersion': '2022-01-01'},
+    'documentation': '',
+    'operations': {
+      'FuzzOperation': {
+        'name': 'FuzzOperation',
+        'http': {
+          'method': 'POST',
+          'requestUri': '/',
+        },
+        'input': {'shape': 'FuzzInputShape'},
+      }
+    },
+    'shapes': {
+      'FuzzInputShape': {
+        'type': 'structure',
+        'members': {
+          'Blob': {'shape': 'BlobType'},
+        },
+      },
+      'BlobType': {
+        'type': 'blob',
+      },
+    },
+  }
+
+  service_model = ServiceModel(model)
+  request_serializer = serialize.create_serializer(
+    service_model.metadata['protocol']
+  )
+  body = io.BytesIO(data)
+  try:
+    request_serializer.serialize_to_request(
+      body,
+      service_model.operation_model('FuzzOperation')
+    )
+  except botocore.exceptions.ParamValidationError:
+    pass
+
+
+def main():
+  atheris.instrument_all()
+  atheris.Setup(sys.argv, TestOneInput, enable_python_coverage=True)
+  atheris.Fuzz()
+
+
+if __name__ == "__main__":
+  main()
+

projects/botocore/project.yaml

@@ -0,0 +1,10 @@
+fuzzing_engines:
+- libfuzzer
+homepage: https://github.com/boto/botocore
+language: python
+main_repo: https://github.com/boto/botocore
+sanitizers:
+- address
+- undefined
+vendor_ccs:
+- david@adalogics.com