Commit Graph

6118 Commits

Author SHA1 Message Date
jonathanmetzman 17e2f96e6a
[infra] Add a script for building all base-images with "-testing" (#6248)
suffix and pushing them to gcr.io/oss-fuzz-base.

This is useful for testing changes to images.
I used it to test changes I made for #6180.
This does not support msan as that image is being removed.

Also lint.
2021-08-19 20:05:32 -07:00
jonathanmetzman 2f0310ef74
Disable clickhouse. (#6246)
I merged https://github.com/google/oss-fuzz/pull/6244
too quickly. Clickhouse fails to build.
Disable temporarily to prevent exceptions since
clickhouse is new
2021-08-19 18:58:20 -07:00
Oliver Chang f9d0813ea8
minor cflite build integration docs changes. (#6240)
- Minor clarification about this using OSS-Fuzz's build chain. Be
  consistent about calling this part OSS-Fuzz (rather than
  ClusterFuzzLite), since that's what the image name says.

- Add project.yaml documentation.

- Refer to OSS-Fuzz's guide for efficient fuzzing.

Related: #6196
2021-08-20 11:37:55 +10:00
asraa 30d927e324
New base builder without lang specific installation + swift base (#5986)
Removes unnecessary stuff in base-builder image to create a base-builder-new, and then adds a base-builder-swift on top of this that swift projects can use (without JVM/Go/etc fuzzing).
2021-08-20 09:52:44 +10:00
Nikita Mikhaylov 7d950a1008
Resurrect ClickHouse fuzzing (#6244) 2021-08-19 16:46:54 -07:00
Google AutoFuzz Team 4387306911
Improve pygment's fuzzer (#6212) 2021-08-19 21:53:59 +01:00
Paul Dreik 900b72e9e5
add upstream author Peter Dimov to cc (#6243) 2021-08-18 15:06:23 -04:00
DavidKorczynski 3e4ba05ecc
nginx: fix fuzzer to avoid NULL-deref (#6242)
* nginx: fix fuzzer to avoid NULL-deref

* dont modifify libsndfile.
2021-08-18 14:37:25 +01:00
Lovell Fuller 12453df2aa
libvips: add imagequant and cgif dependencies (#6241)
Build libvips without test and tools subdirs as these are
not directly fuzz tested.
2021-08-18 12:56:41 +01:00
Bart Van Assche 2550a06f11
net-snmp: Reenable MIB-II and IF-MIB (#6239)
Recently the IF-MIB implementation on the Net-SNMP master branch became
dependent on libnl-route-3. An unfortunate side effect is that this broke
the build of the fuzz tests. Add the pkg-config package such that the
configure script can detect libnl-route-3 and reenable MIB-II and IF-MIB.
2021-08-18 10:34:20 +01:00
Evgeny Vereshchagin 20d69570fe
[selinux] move the fuzz target and build script upstream (#6026)
to make it easier to reproduce and fix bugs locally
2021-08-17 20:03:42 +01:00
Kevin Backhouse c0b2a0076c
Add Exiv2 (#6186)
* Add Exiv2.

* Remove sanitizer flags so that OSS-Fuzz can insert its own.

* Using the fuzzer to create the seed corpus doesn't work with AFL.

* Only use libFuzzer

* Don't add files over 20KB to the corpus.

* Use ${LIB_FUZZING_ENGINE} when building the fuzz target.
2021-08-17 07:20:36 -07:00
Oliver Chang a4bc23909b
Don't upload builds in run_fuzzers. (#6151)
The current way adds a lot of ordering assumptions, and doesn't fit too
well with parallel batch fuzzing either. Add a "upload-build" boolean action
input that can be added to "build_fuzzers" to upload latest builds
instead.

Builds are now uploaded by commit hash, rather than a fixed "latest" name.
ClusterFuzzLite's download_latest_build will check the last 3 commits and download the
first available build by git hash.
2021-08-17 06:36:06 +00:00
Caolán McNamara 44addc5c71
libreoffice: disable afl fuzzer (#6234)
see https://github.com/google/oss-fuzz/issues/6233 for rationale
2021-08-16 22:17:06 -07:00
Guido Vranken 5e5d08420a
[libecc] Fix SHAKE digest (#6232)
See https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37229 for technical discussion.
2021-08-16 22:03:35 +01:00
Garret Rieger 1957409cc4
Fix harfbuzz fuzzer build. (#6230)
test/shaping was renamed to test/shape.
2021-08-16 19:01:32 +00:00
DavidKorczynski 428e88df5f
net-snmp: fix build. (#6229) 2021-08-16 16:08:15 +00:00
olivekl 3ca919279a
Clarify language in continuous_integration.md (#6227)
Clarify AND (not OR) for situations when crashes are reported
2021-08-16 09:00:35 -07:00
Bitshift 55a5812e8c
Update fuzzers to new Atheris version (#6060)
* Update fuzzers to new Atheris version

* Pin new atheris version

* Change = to ==

* Change path where Atheris fuzzers ld_preload from

* Update hypothesis fuzzer to work with new atheris

* Set version to 2.0.1

* Switch to Atheris 2.0.4

* Correct spelling of pygments_fuzzer decorator

* instrument yaml_reader

* Change to latest Atheris

* Set atheris version to 2.0.6
2021-08-16 08:56:54 -07:00
olivekl 926914100c
Update bazel.md (#6228)
Fix typo (though --> through)
2021-08-16 16:54:03 +01:00
DavidKorczynski 62cad8ac51
nginx: add maintainer (#6225) 2021-08-16 13:39:32 +00:00
DavidKorczynski 2a56525117
multiple projects: cleanup stale accounts. (#6224)
* multiple projects: cleanup stale accounts.

* dont disable postgresql for now.
2021-08-16 11:50:57 +01:00
DavidKorczynski 7cfeef419d
apache-httpd: update contact (#6223) 2021-08-16 09:57:55 +00:00
DavidKorczynski 75091df12b
nginx: request access (#6104)
* nginx: request access

I would like to submit fuzzers to nginx and in this context having the coverage information from clusterfuzz would be great.

* nginx: add main_repo field
2021-08-16 10:34:00 +01:00
Paul Dreik ac7bc92356
fix build error ("/out" used instead of "$OUT") (#6221) 2021-08-16 03:10:48 +01:00
TJ Saunders 486d261fb0
Update the `oss-fuzz` build instructions for ProFTPD, to match changes in the project's build. (#6220) 2021-08-14 21:59:31 +00:00
Caolán McNamara 34de2bfce3
clone libreoffice from git.libreoffice.org instead of anongit.freedesktop.org (#6216)
as the latter has become unreliable and is regularly unavailable

and drop some dependencies we no longer need
2021-08-14 13:19:41 -07:00
Guido Vranken be3bc987f0
[bls-signatures] Fix build and support more operations (#6218)
* [bls-signatures] Fix build and support more operations

* [bls-signatures] Fix 32 bit build
2021-08-14 21:01:25 +01:00
Joshua Haberman 736084c473
Switched upb to Bazel for fuzzing. (#6219)
* Switched upb to Bazel for fuzzing.

As of https://github.com/protocolbuffers/upb/pull/405 Bazel
now supports cc_fuzz_test() for its fuzzing target.

* Updated WORKDIR in Dockerfile.
2021-08-14 21:00:43 +01:00
Guido Vranken 4ff26d86a9
[libecc] Upgrade to latest version (#6217) 2021-08-14 17:47:58 +01:00
Paul Dreik 40f37b1d19
[boost.json] initial submission (#5998)
* initial attempt at fuzzing boost json with oss-fuzz

* use the boost super project master branch

* add mp11 to the list of checked out submodules

* remove leftover copy paste code

* use the boost json develop branch

* add vinnie

* add dmitry
2021-08-13 22:05:40 -07:00
tbeu 19ea576614
Build HDF5 1.12.1 for matio (#6018) 2021-08-13 22:03:46 -07:00
Abhishek Arya c2c293d2c1
Fix reproducing timeout to match clusterfuzz 2021-08-13 21:58:16 -07:00
Cuong Manh Le 5bf19bd693
projects: add celestiaorg/smt (#6134)
This project is an implementation of Sparse Merkle tree, which will be
used by Celestia, Cosmos SDK, ... and maybe other blockchain ecosystem.
We want to make sure the code is fuzzed to catch highly impacted bug as
soon as possible.

See:
 - https://github.com/celestiaorg
 - https://docs.cosmos.network/v0.42/
2021-08-13 21:56:50 -07:00
Nigel Tao e21bde5a3c
[wuffs] Build C++ fuzzers too, not just C ones (#6211) 2021-08-13 21:54:00 -07:00
Isaac Brodsky 31ae8ce3a3
H3: Update for functions returning error codes (#6214)
* H3: Update for functions returning error codes

* Read H3 index directly from uint8_t data, not string

* remove new_str

* Fix pointer/int type confusion

* Revert h3NeighborRotations change that is not in master yet

* Fix h3NeighborRotations (again)
2021-08-13 21:53:24 -07:00
Guido Vranken d0c9f6f4a7
[wolfssl] Update auto_ccs and disable AFL (#6204) 2021-08-13 06:56:22 -07:00
jonathanmetzman 01247be731
[infra][tests][NFC] Change mocked function prefix from "mocked_" to "mock_" (#6198)
Also rename mock_ functions to have impl suffix so we can use mock_ in place of mocked_
2021-08-12 11:25:57 -07:00
Quentin Young 5ca8c0e251
[frr] Change CC email (#6209)
Signed-off-by: Quentin Young <qlyoung@nvidia.com>
2021-08-12 19:19:17 +01:00
Caolán McNamara 3dc3309463
harfbuzz moved the sample fonts from 'shaping' to 'shape' (#6208) 2021-08-12 09:44:54 -07:00
Caolán McNamara 68eb27dd42
update libreoffice build dependencies (#6206) 2021-08-12 07:16:40 -07:00
Andrew Brown face127c59
wasmtime: install a newer version of OCaml (#6205)
* wasmtime: install a newer version of OCaml

* Update Dockerfile

* wasmtime: move environment setup to build.sh
2021-08-12 09:38:22 +01:00
jonathanmetzman 7942bb4491
[helper] Change logging from error to info (#6200) 2021-08-11 11:09:24 -07:00
Fabian Meumertzheim ede1fb13ae
[infra] Enable Jazzer support for UBSan C++ features (#6202)
Jazzer now links in the UBSan C++ runtime and thus support the vptr
and function sanitizer settings.
2021-08-11 17:35:29 +00:00
Julien Cretin 75914341cb
Update auto_ccs of opensk project (#6197) 2021-08-11 18:18:36 +01:00
Google AutoFuzz Team 70115d4839
Don't use nginx' internal memory allocator (#6199)
* Don't use nginx' internal memory allocator

See http://nginx.org/en/docs/dev/development_guide.html#debug_memory for details.

* Fix the build.
2021-08-11 18:17:55 +01:00
Andrew Brown d63a5f1432
wasmtime: provide OCaml packages for build (#6193)
* wasmtime: provide OCaml packages for build

In order to build the WebAssembly spec interpreter, these packages are needed.

* wasmtime: remove ocamlbuild as a dependency

The oss-fuzz-base image is using Ubuntu 16.04.7 and the `ocaml-nox` package at this version contains `ocamlbuild`.
2021-08-10 22:30:39 +00:00
Tadeusz Struk b666937c23
tpm2-tss updates (#6195)
* tpm2-tss: update version of tpm simulator

Getting tpm simulator is failing occasionally [1].
Updating simulator version to the lastet might help it.

[1] https://oss-fuzz-build-logs.storage.googleapis.com/log-66fdad5b-1f63-4bc2-8a0e-876201912036.txt

Signed-off-by: Tadeusz Struk <tstruk@gmail.com>

* tpm2-tss: update outdated contact list

Signed-off-by: Tadeusz Struk <tstruk@gmail.com>

* tpm2-tss: add main_repo section

Signed-off-by: Tadeusz Struk <tstruk@gmail.com>
2021-08-10 13:22:19 -07:00
jonathanmetzman 94cfc4fe2f
[cifuzz] Add pruning task (#6188)
Fixes: #6064
2021-08-10 11:10:10 -07:00
jonathanmetzman e407f54e61
[infra][build] Switch to f-strings. (#6182) 2021-08-10 10:48:16 -07:00