diff --git a/projects/crossplane/Dockerfile b/projects/crossplane/Dockerfile new file mode 100644 index 000000000..32071aa8b --- /dev/null +++ b/projects/crossplane/Dockerfile @@ -0,0 +1,20 @@ +# Copyright 2022 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder-go +RUN git clone --depth 1 https://github.com/crossplane/crossplane +COPY build.sh fuzz.go $SRC/ +WORKDIR $SRC/crossplane diff --git a/projects/crossplane/build.sh b/projects/crossplane/build.sh new file mode 100644 index 000000000..8546158ee --- /dev/null +++ b/projects/crossplane/build.sh @@ -0,0 +1,22 @@ +#!/bin/bash -eu +# Copyright 2022 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +mv $SRC/fuzz.go $SRC/crossplane/internal/xpkg/ +go mod tidy +rm /root/go/pkg/mod/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.11/fuzz.go + +compile_go_fuzzer github.com/crossplane/crossplane/internal/xpkg FuzzParse fuzz_parse diff --git a/projects/crossplane/fuzz.go b/projects/crossplane/fuzz.go new file mode 100644 index 000000000..8757a31ee --- /dev/null +++ b/projects/crossplane/fuzz.go @@ -0,0 +1,34 @@ +// Copyright 2022 Google LLC +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. +// + +package xpkg + +import ( + "bytes" + "context" + "io/ioutil" + + "github.com/crossplane/crossplane-runtime/pkg/parser" + "k8s.io/apimachinery/pkg/runtime" +) + +func FuzzParse(data []byte) int { + objScheme := runtime.NewScheme() + metaScheme := runtime.NewScheme() + p := parser.New(metaScheme, objScheme) + r := ioutil.NopCloser(bytes.NewReader(data)) + _, _ = p.Parse(context.TODO(), r) + return 1 +} diff --git a/projects/crossplane/project.yaml b/projects/crossplane/project.yaml new file mode 100644 index 000000000..dd8237c9f --- /dev/null +++ b/projects/crossplane/project.yaml @@ -0,0 +1,13 @@ +homepage: "https://github.com/crossplane/crossplane" +main_repo: "https://github.com/crossplane/crossplane" +primary_contact: "jbw976@gmail.com" +auto_ccs : + - "me@muvaf.com" + - "nicc@rk0n.org" +vendor_ccs : + - "adam@adalogics.com" +language: go +fuzzing_engines: + - libfuzzer +sanitizers: + - address