Commit Graph

3251 Commits

Author SHA1 Message Date
Max Moroz 0b5ff023aa [piex] Replace primary_contact with one of the maintainers (#2345). 2019-06-18 12:48:04 -07:00
Guido Vranken 32bfcebcd2 [piex] Add piex fuzzer (#2345)
* [piex] Add piex fuzzer

* [piex] Add fuzzer-piex
2019-06-18 12:47:04 -07:00
Vincent Ulitzsch 1a629a2c9b [giflib] Extend giflib harness: Extend egif fuzzer target (#2527)
* Improved egif_lib coverage by extending the gif encoder test harness

* stub_output_writer now dynamically reallocates memory

Memory allocation for stub_output_writer is now dynamic:
gifData will be reallocated in base 2 steps every time
we need more space.

* Fix buffer overrun in stub_output_writer when reallocating memory

* Throw assertion if memory reallocation in egif_target fails

egif_target uses dynamic memory reallocation to assure
that stub_output_writer never has a buffer overrun
in stub_output_writer. We throw an assert if
this memory reallocation fails.
2019-06-18 12:44:53 -07:00
Ammar Askar 2d298d2f49 [cpython] Add -rdynamic to fuzzing targets (#2526) 2019-06-18 12:43:11 -07:00
Mihai Maruseac f16a6781fa Fix tensorflow/build.sh after TF commit 44000ad64a (#2528)
We are changing the location of the maximum/minimum bazel version in the
configure.py script so we need to update the way we're looking for the
version to install.

Breaking commit: 44000ad64a
2019-06-18 09:51:05 -07:00
Kostya Serebryany 0cba0117f3 [libfdk-aac] adding libfdk-aac (#2480)
* [glossary] explain cross-pollination

* [glossary] explain cross-pollination

* add fdk-aac

* move fdk-aac to libfdk-aac

* [libfdk-aac] add  -fno-sanitize=shift

* [libfdk-aac] update the contact email, change the repository, disable ubsan's shift-base instead of shift

* [libfdk-aac] change the homepage link

* [libfdk-aac] add one CC entry
2019-06-17 13:20:29 -07:00
Alex Hultman 179d9732a2 [uwebsockets] Hold building script at main repo (#2517) 2019-06-16 08:53:26 -07:00
Max Moroz a3c935fe9c
[rapidjson] Switch project to the experimental mode for now (#2343). 2019-06-14 08:47:49 -07:00
Guido Vranken 4c6ce593dc [rapidjson] Add rapidjson (#2343)
* [rapidjson] Add rapidjson

* [rapidjson] Fix Dockerfile MAINTAINER field
2019-06-14 08:30:54 -07:00
Harish Mahendrakar 9e3ec89cf2 [libaom] Use fuzzer plugin source from libaom repository (#2515)
Removed av1_dec_fuzzer.cc from projects/libaom and instead using
from libaom repository

BUG=https://crbug.com/aomedia/2257
2019-06-14 08:29:20 -07:00
Abhishek Arya 147803b92d
Fix build status link in new project guide (#2511) 2019-06-13 22:16:27 -07:00
Jay Berkenbilt bfc567dc3d Clarifications to the documentation (#2512)
This adds to the documentation information that I would have found
helpful when I was doing my integration.
2019-06-13 13:57:22 -07:00
Ammar Askar 5d3b2f969d [cpython] Use altinstall to avoid creating symlinks (#2510) 2019-06-13 10:41:04 -07:00
Jay Berkenbilt dd8032434a [qpdf] transfer fuzz targets to qpdf repository (#2509)
This switches control of the fuzzers to the qpdf repository and
switches ownership of the project to qpdf's author.
2019-06-13 08:20:42 -07:00
Marco Elver 063fcbd54e [hostap] Switch to new fuzz targets (#2499) 2019-06-13 14:52:15 +10:00
Max Moroz 5025b3517c
[zstd] Enable experimental dataflow build configuration (#1632). (#2507) 2019-06-12 12:31:25 -07:00
Max Moroz 5dece89e3c
[infra] Add support for dataflow builds to the helper script and build check (#1632). (#2501)
* [infra] Add support for dataflow builds to the helper script and build check (#1632).

* Update travis config file.

* Address self-review comments and specify dataflow sanitizer for zstd as well.

* Fix fuzzing_engines in project.yaml

* Fix bad build check for DFSan.

* Use "hasattr" in helper.py to check the sanitizer argument.

* Address more review comments.

* Remove DataFlow config from zstd.

* fix a typo
2019-06-12 11:08:15 -07:00
Émile Grégoire 9ba3387a66 Force usage of master branch. (#2506) 2019-06-12 07:22:48 -07:00
Micah Snyder 7394fb5eec clamav - Minor update to fix built failure now that libcurl is a hard requirement to build clamav. (#2505) 2019-06-12 17:45:59 +10:00
Ammar Askar 9a67b6be92 [cpython] Pull in corpuses and dictionaries for CPython (#2504)
* Pull in corpuses and dictionaries for CPython

* Ignore MSAN errors in build
2019-06-11 16:40:08 -07:00
Mihai Maruseac 20830e74fe [tensorflow] Fix the build by adding python-future to the list of installed deps. (#2503) 2019-06-11 14:08:42 -07:00
Ammar Askar 88d9006f38 Fix coverage build for cpython (#2502) 2019-06-11 11:25:01 -07:00
Max Moroz 2446d3bb5d [zstd] Remove build code for .option files as those are removed upstream. 2019-06-11 10:34:18 -07:00
Alex Hultman 04f5f4c7dc [uwebsockets] Add uwebsockets (#2457) 2019-06-11 06:40:39 -07:00
Max Moroz 3830c427b2 [infra] Ignore return code when removing seed corpus for dataflow build. 2019-06-10 15:32:51 -07:00
Evan Miller 7f94b5cf61 [readstat] Add dictionary files and update corpus location (#2498)
* Add fuzzing dictionaries for new ReadStat targets

They still need proper input corpuses, but this is a start.

* [readstat] Accommodate new file layout

corpus => fuzz/corpus

Dictionary files now included in source tree
2019-06-10 14:36:45 -07:00
Max Moroz 7250d70833
[infra] Run tests on the builder after patching MSan libraries. (#2497)
* [WORK IN PROGRESS] Debug Travis failure when doing build check for MSan build.

* Change order of "MSan patch libraries" and "build check" steps.
2019-06-10 11:18:59 -07:00
Ammar Askar ff4bae9c43 Create docker and build files for cpython3 (#2493)
* Create docker and build files for cpython

* Remove temporary patch (merged upstream)
2019-06-10 11:13:22 -07:00
Max Moroz 1f0a33c712 [infra] Do not archive seed corpus for dataflow builds. 2019-06-10 10:00:20 -07:00
Jay Berkenbilt f858510cbe Qpdf ownership (#2496)
* example project: fix minor problems with standalone fuzzer

* typo: "successfull" -> "successful"
* main should explicitly return 0 on success

* example project: fix minor problems with Makefile

* make "all" the first target
* use LIB_FUZZING_ENGINE to reference fuzzer in all places

* example project: fix typos in README

* Add upstream qpdf maintainer as auto_cc for qpdf

I am adding myself (using my Google account) as an auto_cc in
preparation for taking over ownership of the qpdf project and doing a
full integration with oss-fuzz.
2019-06-09 18:59:50 -07:00
Alex Gaynor 3257d8471c [imagemagick] clone bz2 from its new repo (#2495) 2019-06-08 07:39:30 -07:00
Alex Gaynor a4ef884bf4 [graphicsmagick] clone bz2 from its new repo (#2494) 2019-06-08 07:38:51 -07:00
Max Moroz 43093dcf21
[docs] Add FAQ for non open source projects, mention ClusterFuzz. (#2489)
* [docs] Add FAQ for non open source projects, mention ClusterFuzz.

* Remove TOC as GitHub does not support it.

* Address review feedback.
2019-06-06 09:49:21 -07:00
Max Moroz 755518f802 [njs] Fix coverage build and exclude pcre sources from coverage report (#2481). 2019-06-06 07:44:27 -07:00
steadmon c9bb73a407 [git] Fuzz against the upstream "next" branch. (#2488)
The next branch is where relatively-stable changes live while testing
for stability. We should fuzz against this branch to give extra
confidence that these patches are bug-free before they are merged into
master.
2019-06-05 14:25:59 -07:00
Janos Follath 54733ddc84 Fix a build failure in bignum fuzzer when building the Mbed TLS module (#2487)
* [bignum-fuzzer] Clone Mbed TLS recursively

The cryptography library of Mbed TLS has been moved to a separate
repository. It is now included into the project as a git submodule and
therefore we need to clone Mbed TLS recursively.

* [bignum-fuzzer] Use new Mbed TLS library location

The bignum module in Mbed TLS as part of the cryptography library has
been moved to a new location. This commit sets the corresponding paths
to their new values.
2019-06-04 08:13:23 -07:00
John Andersen eb6be0506e [tpm2-tss] Add Andreas to CC list and sync Dockerfile (#2482)
Signed-off-by: John Andersen <john.s.andersen@intel.com>
2019-06-03 17:15:59 -07:00
Matt Klein 44cbbf7def Update Envoy configuration (#2486)
Update email address.
2019-06-03 15:47:10 -07:00
Max Moroz 7f85bc7b5a [njs] Add xeioex@ as a primary contact (#2481). 2019-06-03 11:14:51 -07:00
Max Moroz 2317c8aacb
[njs] Build pcre dependency manually and enable MSan (#2481). (#2484) 2019-06-03 09:06:53 -07:00
Michael Niedermayer c9fd3f45db projects/ffmpeg/build: Add Demuxer fuzzer (#2483)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2019-06-03 08:49:12 -07:00
Max Moroz 68d71e179c [njs] Remove "Experimental: True" as it does not affect the disclosure deadlines w/o auto_ccs (#2481). 2019-06-03 07:40:33 -07:00
Max Moroz 981266767f [njs] Revert "Null terminate the script string.", as the API accepts size value. 2019-05-31 21:40:00 -07:00
Max Moroz b8762b0e99 [njs] Disable memory sanitizer for now, the builder is not happy. 2019-05-31 20:49:43 -07:00
Max Moroz ecf68cf70b [njs] Null terminate the script string. 2019-05-31 20:47:11 -07:00
Max Moroz 230751d78e
[njs] Add nginx/njs project and njs_process_script_fuzzer. (#2481)
* [njs] Add nginx/njs project and njs_process_script_fuzzer.

* Add copyright, disable logging, disable leaks detection.

* fix memory leaks

* use $LIB_FUZZING_ENGINE

* list myself as a primary contact for now

* enable all sanitizers
2019-05-31 16:59:45 -07:00
Max Moroz 3be06d5e78
[docs] Remove `-lFuzzingEngine` reference from base-builder image readme.
//cc @jonathanmetzman
2019-05-31 16:50:29 -07:00
Max Moroz d1539ce271
[infra] Change auto-generated build.sh template to use $LIB_FUZZING_ENGINE.
//cc @jonathanmetzman
2019-05-31 16:46:48 -07:00
Guido Vranken e5280acde4 [cryptofuzz] Add OpenSSL 1.0.2 and 1.1.0 targets (#2454) 2019-05-30 18:02:28 -07:00
Matt Johnston 1bdad3560d [dropbear] Disable AFL to avoid timeouts (#2474)
* Copy dictionaries

* disable AFL to avoid timeouts in initialisation
2019-05-30 08:08:22 -07:00