Commit Graph

4677 Commits

Author SHA1 Message Date
jonathanmetzman 13f7ba0f63
[presubmit] Allow 'none' as a fuzzing engine (#4370)
'none' is used by projects like spidermonkey that use the JS fuzzer.
2020-08-25 16:31:29 -07:00
Max Moroz eabcccf848
[infra] Fix reproduce command invoking run_fuzzer for a single testcase (#4338). (#4367)
* [infra] Fix reproduce command invoking run_fuzzer for a single testcase (#4338).

* review feedback

* do not introduce new variable, rely on SKIP_SEED_CORPUS only
2020-08-25 11:38:50 -07:00
jonathanmetzman 8e5f144466
Fix typo in continuous_integration.md 2020-08-24 09:38:29 -07:00
Joachim Metz 56bfc603d9
Added libluksde, libvsgpt, libvsmbr, libewf and libsmraw to libyal project configuration (#4358) 2020-08-24 08:40:48 -07:00
Paul Kehrer 50235c64dd
add jbigkit to IM (#4354) 2020-08-23 23:14:03 -07:00
metamerism be6237a516
[openexr] fix memleak in scanlinefuzzer with wide images (#4356) 2020-08-23 23:13:33 -07:00
Abhishek Arya a02946e8f4
Revert chromium clang roll to fix mismatched coverage data error (#4353)
Temporarily fixes #4348
2020-08-21 22:18:24 -07:00
Abhishek Arya 4628ee31a9
Revert "Revert "Compile + install LLVMgold.so so -flto works (#4332)" (#4351)" (#4352)
This reverts commit 7f8f5e0182.
2020-08-21 22:12:46 -07:00
Abhishek Arya 7f8f5e0182
Revert "Compile + install LLVMgold.so so -flto works (#4332)" (#4351)
This reverts commit d1ddd25937.
2020-08-21 16:52:23 -07:00
Tyson Smith 676e433557
[firefox] Disable UBSan and honggfuzz for now (#4346) 2020-08-20 20:02:29 -07:00
Tyson Smith f0c4879cc4
[firefox] Call 'mach bootstrap' in Dockerfile and build.sh (#4345) 2020-08-20 18:43:30 -07:00
Ravi Jotwani aa807fcd8a
[pycryptodome] Additional Fuzzer (#4339)
* initial commit

* update build script, build failing

* add necessary environment variable definitions

* build working

* programmatically get system bits

* add md5 fuzzer

* fix style

* add fuzzers for two more hash functions

* testing dynamic includes

* build working

* clean up build script

* add aes fuzzer

* patch block_common to avoid build issues

* remove comments

* update patchfile location

* move patchfile again

* apply patch from subdirectory

* remove another comment

* change state type, use same data for encryption and decryption
2020-08-20 18:42:35 -07:00
Victor M. Alvarez 038a3e272e
yara: enable "macho" module. (#4344) 2020-08-20 15:26:14 -07:00
Tyson Smith b77c1c6980
[mp4parse-rust] Add to vendor_ccs list (#4343) 2020-08-20 14:44:13 -07:00
Josh Matthews 250fa90859
[servo] Update for repo reorganization. (#4340) 2020-08-20 06:52:30 -07:00
Kalvin 77a94ceb8b
projects/ghostscript: add contributor (#4333)
This change adds me (Kalvin) to the list of contributors allowed
to view Ghostscript issues on OSS-Fuzz.
2020-08-19 09:56:51 -07:00
van Hauser d1ddd25937
Compile + install LLVMgold.so so -flto works (#4332) 2020-08-18 09:55:08 -07:00
Marten Seemann c059c5322b
[quic-go] add a fuzz target for QUIC transport parameters (#4330) 2020-08-18 00:11:50 -07:00
Marten Seemann ea7fa1041c
[quic-go] add qpack (#4331) 2020-08-18 00:11:35 -07:00
Ravi Jotwani b979d7ef34
[pycryptodome] Initial integration (#4317)
* initial commit

* update build script, build failing

* add necessary environment variable definitions

* build working

* programmatically get system bits

* add md5 fuzzer

* fix style

* add fuzzers for two more hash functions

* testing dynamic includes

* build working

* clean up build script

* style fixes
2020-08-17 11:35:47 -07:00
Max Moroz d250f4ffbb
[infra] Upgrade reproduce command to re-use run_fuzzer functionality. (#4324)
* [infra] Upgrade reproduce command to re-use run_fuzzer functionality.

* fix a typo

* add missing quotes
2020-08-17 11:34:21 -07:00
Nick Wellnhofer f686d96257
[libxml2] Add another target, minor fixes (#4329)
- Add new XPath fuzz target
- Set V=1 globally
- Clean seed corpus to make sure it will be rebuilt
2020-08-17 07:46:18 -07:00
DavidKorczynski 0acecb4451
[nodejs] Simplify build process as most work is now upstreamed. (#4327)
* Build of nodejs has now been upstreamed and this commit simplifies the build for nodejs to the new updates.

* We only support libfuzzer for now.

* Simplified the build script.
2020-08-17 07:41:25 -07:00
Joachim Metz 56525dc76c
Added libfwps, libagdb, libcreg, libmdmp, libnk2 and libvslvm to libyal project configuration (#4328) 2020-08-16 22:49:48 -07:00
asraa 9a817f24b3
[envoy] add zach (#4323)
Signed-off-by: Asra Ali <asraa@google.com>
2020-08-14 14:23:56 -07:00
Tom Ritter 3d5478c653
[rnp] Generate input corpus (#4322) 2020-08-14 10:53:56 -07:00
Alex Gaynor 929dc5e247
[libyaml] use an email with a google account (#4321) 2020-08-14 09:40:40 -07:00
Alex Gaynor 9981af4965
Added additional libyaml maintainers (#4319) 2020-08-14 08:55:15 -07:00
Yuquan Wang ae2d4de73a
[usrsctp] Add fuzzer for usrsctp (#4318)
* merge a new fuzzer o

* merge a new fuzzer of usrsctp
2020-08-13 16:52:50 -07:00
werdnaH 5125d29c64
Move zip and json to data folder (#4293)
Do this so that CIFuzz will work.

Co-authored-by: Zepeng Hu <zepenghu@google.com>
Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
2020-08-13 15:31:01 -07:00
Max Moroz a986d76ef4
[infra] Use 16 threads when building LLVM (#4270). (#4315)
* [infra] Use 16 threads when building LLVM (#4270).

* update the comment
2020-08-13 12:58:02 -07:00
Michael Jezierny af41a3d31a
[sleuthkit] Initial integration for Sleuthkit (#4178)
* Get Sleuthkit building in the OSS-Fuzz builder.

* added fuzzers, included primary contact email, and updated build script

* included license headers

* fixed variable name typo in build script

* remove memory initialization in sleuthkit_mem_img.h

* style fixes, remove instances of goto

Co-authored-by: Ravi Jotwani <rjotwani@google.com>
2020-08-13 12:51:52 -07:00
Ondřej Surý 80a651a794
[bind9] Adjust the emails, so everybody on the team has access (#4313)
change the primary contact to the BIND 9 developers group alias,
instead of security-officer
2020-08-13 09:16:12 -07:00
Ondřej Surý 6f0a24f0d5
[bind9] Re-enable AFL fuzzing engine. (#4310) 2020-08-13 07:21:38 -07:00
Evgeny Vereshchagin eb5b769c75
[systemd,util-linux] build more often (#4312)
Hopefully this should prevent OSS-Fuzz from reporting bugs that
have alread been fixed. Though I'm not sure how stable it's going to be
given that https://github.com/google/oss-fuzz/issues/4083 is still
open. Let's see.
2020-08-13 07:18:16 -07:00
Oliver Chang 2e11666263
Fix typo in bind9 project.yaml 2020-08-13 10:37:02 +10:00
Max Moroz cec66e9662
[infra] base-clang: limit the number of build threads to 4 (#4270). (#4311) 2020-08-12 16:44:29 -07:00
Max Moroz 5f1504cb10
[bind9] Add more contacts to auto_ccs (#4310). 2020-08-12 16:42:07 -07:00
Ravi Jotwani 8a74af8f52
[libyaml] Add more fuzz targets (#4043)
* added draco integration files

* wrote build file and Dockerfile for Draco

* added more fuzzers, updated build script to generate corpus and options for each

* place yaml.dict in SRC first, rather than in OUT directly

* changed fuzzers from c++ to c, updated build script

* started using booleans instead of ints, updated naming conventions

* replaced all instances of  with

* removed memsets, stopped using first two bytes of input, and removed file I/O

* fixed style, changed function return types to bool instead of int

* added libyaml_parser_fuzzer back, implemented string handling to not exceed buffer size in libyaml_emitter_fuzzer, and made style fixes

* changed boolean functions to return error, not success

* fixed inverted check

* changed variable names, fixed crash in libyaml_emitter_fuzzer

* fixed addition/subtraction style

* make a dynamically growing heap buffer

* place yaml_write_handler in distinct header file, style fixes

* fix style and memory safety issues in reformatter fuzzers, remove unused vars

* consistent assignment of done variables
2020-08-12 15:44:24 -07:00
Ravi Jotwani 089c9e039b
[e2fsprogs] Delete ext2fs_read_write_dir_block_fuzzer.cc (#4302)
Deleting this fuzzer as it has proved problematic (see internal bug #160587918). Reasons for deletion:
- This fuzzer is not written well. We pass an uninitialized output buffer to `ext2fs_read_dir_block()`, have redundant function calls (see [here](https://github.com/tytso/e2fsprogs/blob/master/lib/ext2fs/dirblock.c#L62) and [here](d36af019b0/projects/e2fsprogs/fuzz/ext2fs_read_write_dir_block_fuzzer.cc (L66))), and pass empty `blk64_t` structs to the fuzz targets.
- Removing this fuzzer has negligible impact on total coverage. Running [this](https://github.com/googleinterns/oss-fuzz-utils/blob/master/coverage.sh) coverage utility after removing the fuzzer locally outputs the following results (fuzzing each build for 10 minutes).
```original: 244/13082 regions - 1.86515823269% coverage
modified: 239/13070 regions - 1.8286151492% coverage```

@tytso @alsophian Please feel free to chime in.
2020-08-12 15:43:50 -07:00
Ondřej Surý 70abe8f33c
[bind9] Adjust the Dockerfile and build.sh for main branch (#4309) 2020-08-12 14:16:48 -07:00
Joe Drago 014e070f99
[libavif] Cut down on post-decode combinations to avoid timeouts (#4308)
Co-authored-by: Joe Drago <jdrago@netflix.com>
2020-08-12 13:43:18 -07:00
b92paul 6ffa47eb77
[CRAS] Fix build error and build new fuzzer (#4306)
* [CRAS] Fix build error and build new fuzzer

- Fix build error by installing 1.8.x gtest and using `make install` to
  install gtest pc file for pkg-config
- Build and add new fuzzer `cras_hfp_slc`

BUG=oss-fuzz:24744

* fix the copyright

* fix the copyright

* Update Dockerfile

Co-authored-by: Max Moroz <mmoroz@chromium.org>
2020-08-12 13:42:51 -07:00
Max Moroz 9f088e8671
[bind9] Temporarily disable AFL fuzzing engine. (#4307) 2020-08-12 13:25:50 -07:00
Ondřej Surý 697d0d2835
[bind9] Add bind9 as new proposed oss-fuzz target (#4304)
* Add bind9 as new proposed oss-fuzz target

* Add basic Dockerfile and build.sh

* Change the auto_cc addresses to @isc.org

* fix the copyright

* fix the copyright

Co-authored-by: Max Moroz <mmoroz@chromium.org>
2020-08-12 12:21:42 -07:00
Max Moroz 8712207990
[infra] Make bad_build_check to use run_fuzzer when testing startup crash. (#4301)
* [infra] Make bad_build_check to use run_fuzzer when testing startup crash.

* use SKIP_SEED_CORPUS=1
2020-08-12 09:57:15 -07:00
Max Moroz e4d3fb0f8c
[infra][docs] Be more explicit about code coverage being supported for C/C++ only (#4284). (#4303)
* [infra][docs] Be more explicit about code coverage being supported for C/C++ only (#4284).

* fix typos and pass env variable
2020-08-12 09:32:05 -07:00
Ravi Jotwani 9348981822
[alembic] Initial integration (#4236)
* initial commit

* removed instances of cout in fuzzer, build failing

* Fix the Alembic build.

This commit gets Alembic building properly by linking it against
a locally compiled checkout of the most recent OpenEXR release.

* placed temp file in /tmp, modified build script

* added zlib1g-dev:i386 as a dependency in Dockerfile

* style fixes, removed msan

* combine dumpAttribute functions

* fix formatting

* update fuzzer_temp_file.h, style fixes for fuzzer

* populate target names

* disable ubsan for the time being

Co-authored-by: Michael Jezierny <mtjz@google.com>
2020-08-11 16:43:16 -07:00
Joe Drago 425b3689e2
[libavif] add bidirectional RGB conversion paths to the fuzzer (#4300)
Co-authored-by: Joe Drago <jdrago@netflix.com>
2020-08-11 16:27:41 -07:00
Guido Vranken d36af019b0
[cryptofuzz] Enable wolfSSL keygen (#4298) 2020-08-11 11:06:47 -07:00