Commit Graph

5221 Commits

Author SHA1 Message Date
van Hauser 05cac485d3
Fixes afl++ installation (#5087)
* fix afl++ installation

* update to experimental afl++ checkout, setting afl-clang-fast

* update afl++ commit id to prevent unnecessary compile warnings

* Remove dictionary links addition.

Co-authored-by: Abhishek Arya <inferno@chromium.org>
2021-02-01 16:20:18 -08:00
jonathanmetzman 95d3905ec9
[cifuzz] Support a batch fuzzing mode (#5073)
In this mode, CIFuzz will keep fuzzing until the time limit is reached, even if a crash was found.
2021-02-01 10:49:33 -08:00
Abhishek Arya b19e700192
Revert "Switch to using afl-clang-fast for afl++. (#5074)" (#5086)
This reverts commit 42018eeb1c.
2021-02-01 07:44:13 -08:00
AdamKorcz 958e0abd68
[pngquant] Initial integration (#5078)
* [teleport] Initial integration

* Minor update to run tests again

* [pngquant] Initial integration

* Small fix

* Removed afl

* Updated build files

* Update to Dockerfile

* Removed fuzzer
2021-02-01 07:06:19 -08:00
Guido Vranken 6723257f41
[wolfmqtt] Add project (#5054) 2021-02-01 09:48:28 +11:00
AdamKorcz 03fad2084e
[lotus] Initial integration (#4957)
* [teleport] Initial integration

* Minor update to run tests again

* [lotus] Initial integration

* Updated lotus files

* Experimental fix

* Removed cbor fuzzer from build script

* Changed copyright header

* Fixed nits
2021-01-31 11:30:02 -08:00
Abhishek Arya 93eb6024f4
Add AFL_MAP_SIZE in run_fuzzer
Otherwise get errors like these for libsass.

[+] All right - fork server is up.

[-] PROGRAM ABORT : AFL_MAP_SIZE is not set and fuzzing target reports that the required size is very large. Solution: Run the fuzzing target stand-alone with the environment variable AFL_DEBUG=1 set and set the value for __afl_final_loc in the AFL_MAP_SIZE environment variable for afl-fuzz.
         Location : report_error_and_exit(), src/afl-forkserver.c:321
2021-01-31 10:48:04 -08:00
Abhishek Arya 42018eeb1c
Switch to using afl-clang-fast for afl++. (#5074) 2021-01-31 09:11:42 -08:00
Catena cyber c38c48cb3d
No longer disables asm for gcrypt in ecc-diff-fuzzer (#5082) 2021-01-31 09:10:19 -08:00
Tom Thorogood b1916104d5
Add @tmthrgd to go-dns fuzzing project access (#5083)
* Add myself to go-dns fuzzing project

https://github.com/miekg/dns/graphs/contributors should adequately explain why.

* Add missing main_repo

Co-authored-by: Abhishek Arya <inferno@chromium.org>
2021-01-31 09:09:59 -08:00
Michael Jezierny db59caa2d2
Update download URL for InChI library. (#5075)
One of the InChI maintainers contacted me over email to inform us of the
new release, so I'm updating the URL.
2021-01-29 16:18:39 -08:00
DavidKorczynski 97e2bbd234
Civetweb: initial integration (#4983)
* civitweb: initial integration.

* updated the project.yaml

* Trying with a different port.

* Trying port 8002.

* new port.

* Updated the project configurations for civetweb and removed changing of port.
2021-01-29 14:20:31 -08:00
Randy 0e678a37db
Add project utf8proc (#5030)
* Add project utf8proc

* add Dockerfile, build.sh

* dummy commit

* dummy commit

* speculative fix

* Update build.sh

* Update build.sh

* Update build.sh

* Remove afl sanitizer.

Co-authored-by: Abhishek Arya <inferno@chromium.org>
2021-01-29 14:05:27 -08:00
jonathanmetzman 4c4b137a70
[cifuzz][external] Use ssh_url and fix affected fuzzers (#5072)
1. Use ssh_url.

This only affects external (non-oss-fuzz) users.
Since there are none, it doesn't affect anyone.
Even if it did, exploitation would require owning the network
Github actions runs on.
This is to prevent MITM attacks.

2. Affected fuzzers bug:
We accidentally were skipping the remove unaffected functionality.
2021-01-29 10:33:36 -08:00
Florian Mayer 5740711ba1
Remove taylori from cc list (#5067) 2021-01-29 10:06:05 -08:00
tsdgeos 7866ec6566
poppler: Don't force an old meson version (#5065) 2021-01-28 18:14:47 -08:00
Damien Miller 62f70575c5
Enable fuzzing of key exchange (#5066)
* enable null cipher for fuzz tests

* hook key exchange fuzzer into build

Co-authored-by: Damien Miller <djm@google.com>
2021-01-28 16:51:47 -08:00
jonathanmetzman de2ecf8553
[cifuzz] Allow specifying corpus for run_fuzzer (#5064) 2021-01-28 15:04:43 -08:00
jonathanmetzman f2756d7321
[CIFuzz] Move run_fuzzers to new config system (#5063)
Also, decide is_github based on something not used/faked by Skia.
2021-01-29 09:49:03 +11:00
jonathanmetzman d7e85a20b0
[CIFuzz] Fix diffing + Refactor (#5032)
* [CIFuzz] Fix diffing + Refactor

Make diffing work in two scenarios where it previously failed:
1. Commit fuzzing. In this case, we diff $COMMIT against
$COMMIT^1 because the intent here is to fuzz the commit.
2. Fuzzing PRs that aren't to master. In this case, we previously
were diffing against origin/master. Instead, diff against the local
version of the base repo. This also has the nice effect of handling
PRs that havent pulled from master recently enough.

Also do refactoring.
1. Move code that is different for differenct CI systems to continuous_integration.py
2. Change how configuration in build_fuzzers is handled.
Previously configuration was gotten in build_fuzzers_entrypoint
and passed as individual params. This made code ugly and hard to
read. Instead, move code dealing with config to it's own module
config_utils. This module implements a config class which can
be used to create objects that are passed around to code that needs
it. Making the code much easier to read.
TODO: Move run_fuzzers code to new config system.
2021-01-28 12:10:57 -08:00
DavidKorczynski fdcd425579
sudoers: update fuzzers (#5058)
* updates to sudoers fuzzers.

* Updated the fuzzers for sudoers

* Updated the sudoers parse fuzzer

* Remove whitespace
2021-01-28 11:13:28 -08:00
Florian Mayer 00e8c6c5a7
perfetto: run fuzzers with UBSan (#5059)
Our build now supports this as well.
2021-01-28 18:39:29 +00:00
Stefan Bucur 41e24edb3c
Fix argument order in run_fuzzer command example. (#5060) 2021-01-28 08:53:18 -08:00
Abhishek Arya d45336243a
Simplify changed files logic. (#5056) 2021-01-27 17:43:15 -08:00
Abhishek Arya aeb1be4b6e
Fix get_changed_files in infra/ci. (#5055)
Fixes https://github.com/google/oss-fuzz/issues/5022
2021-01-28 11:06:04 +11:00
Abhishek Arya 23e24a4bac
Get list of changed files from branch head, instead of master. (#5048)
* Get list of changed files from branch head, instead of master.

Fixes https://github.com/google/oss-fuzz/issues/5022

* Add debug with subprocess.call.

* Try again debugginig.

* Try again

* Fix works!
2021-01-27 14:28:27 -08:00
Florian Mayer 21c3e09de9
Run fuzzers using AFL now we have fixed the build. (#5053)
Built and ran `python infra/helper.py check_build --engine afl perfetto ...` on all our fuzzers successfully.
2021-01-27 13:29:00 -08:00
antonrohr 5e2ea3e06b
Project Orbit: Fix Dockerfile (#5029)
* Project Orbit: Fix Dockerfile

This change is necessary to reflect the recent branch renaming on
github.com/google/orbit from master to main.

* Project Orbit: Fix build.sh

The build is fixed by manually setting flags for building llvm.

* Addressed review comments
2021-01-27 13:26:36 -08:00
DavidKorczynski 191d8a640c
sudoers: initial integration (#5052)
* Inital integration of sudoers

* make sudoers work with coverage

* Added main project maintainer to project.yaml

* Updated the configs.
2021-01-27 08:16:16 -08:00
Sergey Nizovtsev bd5b2a4f4d
tmux: take openbsd security list off from CC (#5051) 2021-01-27 05:48:45 -08:00
Abhishek Arya 65d4f8e5cc
Fix missed AFL++ changes in README.md 2021-01-26 15:29:02 -08:00
Abhishek Arya 89603f367a
Use afl++ in docs. (#5049) 2021-01-26 15:28:08 -08:00
Abhishek Arya 6fb0ce9366
Update project.yaml 2021-01-26 12:36:58 -08:00
jonathanmetzman d6ff0bfcdc
[CIFuzz] Seperate code for running fuzzers into own module: run_fuzzers.py (#5031)
TODO: Rename cifuzz.py to build_fuzzers.py
2021-01-26 08:32:41 -08:00
Abhishek Arya 3e112546fc
Update project.yaml 2021-01-25 22:43:44 -08:00
Abhishek Arya 54bfb5e406
Disable llvm_libcxx (unmaintained, bad fuzz targets) 2021-01-25 22:43:18 -08:00
AdamKorcz b6b66e6228
[cmake] Initial integration (#4917)
Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
2021-01-25 11:46:30 -08:00
jonathanmetzman 665e489821
[afl++] Use AFL++ instead of AFL for fuzzing. (#5046) 2021-01-25 09:14:11 -08:00
jonathanmetzman 0ac841a1a4
Replace terms that are uninclusive. (#5045) 2021-01-25 08:41:34 -08:00
Oliver Chang 20b7246eae
Use more inclusive "blocklist" in code we control. (#5044) 2021-01-25 15:22:50 +11:00
neildhar 15070be0dd
[Hermes] Update CMake flag (#5043) 2021-01-25 13:06:20 +11:00
Florian Apolloner df4675970d
Move django-fuzzers to a new location. (#5041)
Updated the python version while on it.
2021-01-23 17:52:59 +00:00
Arash Partow d19281b9b8
[exprtk] Set maximum expression size evaluation phase (#5040) 2021-01-23 09:36:55 -08:00
Stefan Bucur 03fb1febc3
Explicitly use the compiler toolchain provided by the OSS-Fuzz environment. (#5039)
* Explicitly use the compiler toolchain provided by the OSS-Fuzz environment.

* Add script documentation.
2021-01-22 12:58:31 -08:00
Stefan Bucur 5f6c8adc7f
Add test project for the Bazel fuzzing rules. (#4936)
* Proof of concept for Bazel support in OSS Fuzz.

* Moved the Bazel rules project under a directory with a "-test" suffix, to better convey intent.

* Added copyright header.

* Update year in copyright note.

* Factor out the '_oss_fuzz' package suffix to bash var.

* Moving 'disabled' attribute at the end of the yaml file.

* Simplified Dockerfile due to base image update.
2021-01-22 07:43:10 -08:00
Antoine Pitrou 3fa5cb1624
[arrow] Add contact (#5033)
Add Kenta Murata to the list of secondary contacts.
2021-01-22 07:26:56 -08:00
Guido Vranken bbc1aa0a9d
[wolfssl] Add Botan to Cryptofuzz-based fuzzers for comparing outputs against (#5037)
* [wolfssl] Add Botan to Cryptofuzz-based fuzzers for comparing outputs against

* [wolfssl] Build Botan module in oracle mode

For more information see:
https://github.com/guidovranken/cryptofuzz/tree/master/modules/botan#using-botan-as-an-oracle
2021-01-22 07:06:02 -08:00
Oliver Chang 8fcb4659e3
Add a missing requirement for CI. (#5036) 2021-01-22 12:45:11 +11:00
jonathanmetzman 648242fdb4
[pylint] Enable no-member check (#5034) 2021-01-21 16:21:17 -08:00
Oliver Chang 5b51cfb00f
Fix build functions tests when invoked from unittest.TestSuite. (#5027) 2021-01-21 07:43:42 -08:00