Commit Graph

5124 Commits

Author SHA1 Message Date
Jonathan Metzman 0be9a235b8 merge 2021-01-20 07:02:39 -08:00
Jonathan Metzman 50109305cb New module for affected fuzz targets 2021-01-20 06:56:13 -08:00
Jonathan Metzman cb262dfbcb fmt/lnt 2021-01-20 06:51:30 -08:00
Jonathan Metzman 2ce7db4d47 Refactor coverage and move to own module 2021-01-20 06:47:48 -08:00
jonathanmetzman b9094ea003
[CIFuzz][NFC] Refactor affected fuzzers and improve logging (#5006)
1. Add a get_affected_fuzzers function.
2. Add comments explaining rationales.
3. Fix logging so that each affected fuzzer is only logged once.
4. Don't put each file affecting each fuzzer on its own line, this makes logs unreadable.
5. Improve logging wording.
2021-01-20 06:41:39 -08:00
Abhishek Arya 24d1b4e01e
Remove unneeded honggfuzz examples from base-builder. (#5011)
Save 177Mb.

root@eca2ea09a598:/src/honggfuzz/examples# du -h
16K	./glibc
8.0K	./libxml2
2.4M	./openssl/corpus_privkey
5.1M	./openssl/corpus_x509
18M	./openssl/corpus_client
27M	./openssl/corpus_server
52M	./openssl
16K	./externalfuzzers
12K	./libpng
25M	./bind/corpus
25M	./bind
29M	./linux_kernel_ip/corpus
30M	./linux_kernel_ip
16K	./libjpeg
20K	./terminal-emulators
33M	./apache-httpd/corpus_http1
39M	./apache-httpd/corpus_http2
72M	./apache-httpd
12K	./file
16K	./badcode/targets
8.0K	./badcode/inputfiles
36K	./badcode
177M	.
2021-01-20 05:51:08 -08:00
Stefan Bucur 54232af56f
Add the Bazel dependencies to the base builder image. (#4976)
* Add the Bazel dependencies to the base builder image.

* Removing Python 2 from the base image.

* Fix the Bazelisk fetching script.
2021-01-20 05:33:01 -08:00
Alan Modra 9de297cc73
Issue 27734: binutils:fuzz_readelf: Abrt with empty stacktrace (#4945)
Clear static vars after freeing, to prevent a double-free on the next
test iteration.
2021-01-20 05:02:17 -08:00
Guido Vranken c3d69abf14
[cryptofuzz] Use latest version of xxHash (#5003)
* [cryptofuzz] Use latest version of xxHash

* [cryptofuzz] Trigger CI
2021-01-20 05:01:27 -08:00
Google AutoFuzz Team dffc529a71
Make cairo's issues public by default (#4990)
This is what upstream wants: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/69#note_768642
2021-01-20 05:00:46 -08:00
Oliver Chang 6e41513dbb
build_specified_commit: Remove an exception. (#5009)
Return None rather than exceptioning out when a suitable base-builder
cannot be found to allow more graceful error handling.
2021-01-20 16:52:49 +11:00
Catena cyber 433ddc2337
Sets language env variable when running shell (#5007)
* Sets language env variable when running shell

* Always sets FUZZING_LANGUAGE
2021-01-19 14:20:39 -08:00
Abhishek Arya facd091688
Update project.yaml 2021-01-19 08:16:30 -08:00
Abhishek Arya 6eccdf6fd9
Update project.yaml 2021-01-19 08:15:20 -08:00
DavidKorczynski c849022b75
[python-lz4] initial integration (#4989) 2021-01-19 06:49:52 -08:00
DavidKorczynski b516c4b72d
[urllib3] initial integration. (#4997) 2021-01-19 06:45:25 -08:00
Guido Vranken e664f80b73
[relic] Add project relic (#4987) 2021-01-19 06:43:11 -08:00
Google AutoFuzz Team 0ba7eeef2e
Add a check to prevent cairo from immediately crashing (#4992) 2021-01-18 13:17:06 -08:00
Zac Hatfield-Dodds 613d735dc7
Show how to use Hypothesis to fuzz Python code (#4975)
* Show how to use PBT

Hypothesis makes fuzzing complex Python code fun, easy, and a lot more rewarding than constructing all your objects by hand.

* Review updates
2021-01-15 15:33:29 -08:00
Catena cyber 69f39bc373
Adds grpc-go project (#4971)
* Adds grpc-go project

* Add dfawley@

Co-authored-by: Abhishek Arya <inferno@chromium.org>
2021-01-15 13:12:37 -08:00
AdamKorcz 7340502fbe
Remove Ninja maintainer (#4986)
* [teleport] Initial integration

* Minor update to run tests again

* Remove maintainer from Ninja

* Minor fix
2021-01-15 12:26:46 -08:00
Amit Patankar df1fc93433
Switch TensorFlow Python pip package (#4984) 2021-01-15 11:44:53 -08:00
AdamKorcz 6c83c5eff4
Add maintainer to Ninja (#4981)
* [teleport] Initial integration

* Minor update to run tests again

* Changed maintainers email address

* Minor fix

* Added maintainer to ninja
2021-01-15 10:12:29 -08:00
Catena cyber e8262872b5
Adds people to fio project (#4978)
* Adds people to fio project

* Right email address
2021-01-15 08:17:33 -08:00
Amit Patankar 18b0f956ed
Create a new Python fuzzing project for tensorflow (#4958)
* Create a new Python fuzzer for tensorflow.

* Add license headers.

* Remove an unnecessary numpy install.

* Fix the path for the temporary rename.

* Specify the supported fuzzers and sanitizers.

* Remove the undefined fuzzer.

* Resolving comments by inferno-chromium.

* Fixed the check_build hang. Manually adding numpy shared objects and preloading them to avoid a dependency load deadlock.

* Undo the removal of source code or else no fuzzers will be found.
2021-01-14 18:11:49 -08:00
Abhishek Arya a252dc2d3a
Use python3 in checkout_build_install_llvm.sh, revert python move patches. (#4974)
* Revert "Update Dockerfile"

This reverts commit 5eae19fb57.

* Revert "Move python 3 install to base-clang, needed for clang build. (#4967)"

This reverts commit 018314eefa.

* Use python3 in checkout_build_install_llvm.sh
2021-01-14 15:11:59 -08:00
Everett Maus 9eb1b873c5
Removing old projects from OSS-fuzz configuration (#4973) 2021-01-14 14:42:55 -08:00
Abhishek Arya 5eae19fb57
Update Dockerfile 2021-01-14 14:41:34 -08:00
Abhishek Arya 018314eefa
Move python 3 install to base-clang, needed for clang build. (#4967)
```
-- Looking for os_signpost_interval_begin - not found
CMake Error at /usr/local/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find Python3 (missing: Python3_EXECUTABLE Interpreter)
Call Stack (most recent call first):
  /usr/local/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:582 (_FPHSA_FAILURE_MESSAGE)
  /usr/local/share/cmake-3.19/Modules/FindPython/Support.cmake:3148 (find_package_handle_standard_args)
  /usr/local/share/cmake-3.19/Modules/FindPython3.cmake:398 (include)
  CMakeLists.txt:711 (find_package)

-- Configuring incomplete, errors occurred!
See also "/work/llvm-stage1/CMakeFiles/CMakeOutput.log".
See also "/work/llvm-stage1/CMakeFiles/CMakeError.log".
The command '/bin/sh -c /root/checkout_build_install_llvm.sh' returned a non-zero code: 1
```
2021-01-14 11:15:13 -08:00
Evan Miller c47027fb5b
[mdbtools] Remove path components from zipped corpus (#4969)
See https://github.com/google/oss-fuzz/issues/4956
2021-01-14 11:12:50 -08:00
Abhishek Arya 53c49bd0c8
Remove MongoDB (#4968)
MongoDB is now under SSPL license which does not qualify it
as an open-source project.
2021-01-14 10:25:13 -08:00
Catena cyber 9bb16fd88b
Use now main branch for dovecot project (#4960) 2021-01-14 10:14:32 -08:00
Abhishek Arya e3b3ba3db2
Upgrade docs. (#4966) 2021-01-14 10:13:22 -08:00
Guido Vranken 0a73c43a45
[cryptofuzz,wolfssl] Disable randomizing ECDSA signatures (#4953) 2021-01-13 20:54:26 -08:00
Oliver Chang 0612668e8c
build_specified_commit: Return failure rather than raise exception when rebuild fails. (#4964) 2021-01-14 15:49:15 +11:00
Oliver Chang 0a7813d978
repo_manager: Allow unshallow to return non-zero. (#4963)
Unshallow can fail in a submodule, even if the unshallow succeeded for
the main repo.
2021-01-14 14:16:20 +11:00
wiredfool dcd9e6fa2d
apt-get update, fixes build failure (#4961) 2021-01-13 13:23:29 -08:00
Catena cyber e8832cecaa
Adds project fio (#4916)
* Adds project fio

* fix nits from review

* Fix CI for afl and remove MSAN

* Use upstream repo

* Fix comments from code review
2021-01-13 11:35:44 -08:00
Google AutoFuzz Team 8bc06174be
Add bleach (#4959) 2021-01-13 08:42:19 -08:00
Evan Miller 2de41299d8
[mdbtools] Move test files out of the checkout tree (#4955)
Per #4928, external files are overwritten by CIFuzz if they have
been checked out into the main source tree.
2021-01-12 13:45:52 -08:00
Robert Löhning a23f8971d6
[qt] Update package installation (#4954)
- ninja is the preferred build tool
- 32-bit libraries are no longer needed
2021-01-12 10:24:39 -08:00
Amit Patankar 5321d64ee7
Remove the constant fuzzer from oss-fuzz. (#4952)
We are adding a `tf.constant` fuzzer for Python in oss-fuzz. We do not want it to run on oss-fuzz yet until we are confident it works. Sorry for the repeated PRs into the oss-fuzz directory. Working to alleviate this.
2021-01-11 14:42:43 -08:00
Nicolas Iooss 897bce8614
[selinux] add James Carter's email (#4934)
James Carter (https://github.com/jwcart2) is a member of the team of
people who develop and maintain SELinux.
2021-01-11 14:42:13 -08:00
Catena cyber 51b865abdc
Adds people to project pyyaml ccs (#4949) 2021-01-11 12:01:45 -08:00
Catena cyber b5b4b259ec
Adds golang project go-sqlite3 (#4946) 2021-01-11 09:25:05 -08:00
Catena cyber 6817d2ca67
Adds target for pyyaml project (#4944) 2021-01-11 09:05:12 -08:00
tbeu 93f782ff0d
Build HDF5 1.12.0 for matio (#4939) 2021-01-10 11:07:53 -08:00
Guillaume Valadon d67c6c89aa
[scapy] Change primary contact (#4940)
It cannot use my main email address to access the bug report. I would like to use my main gmail address instead.
2021-01-10 11:07:12 -08:00
DavidKorczynski 6c936e30e6
Update project.yaml (#4935)
This adds several maintainers to the project.
2021-01-08 08:26:22 -08:00
wiredfool 9abfa5256c
[pillow] Pillow build improvements (#4929)
* Improve pillow build isolation

* remove develop (not build) dependencies

* Use production builds for dependencies

This is the repo/process that is used to build the binary production version

* fuzz script installed upstream

* Added license block

* assign copyright
2021-01-07 21:11:40 -08:00