Commit Graph

2810 Commits

Author SHA1 Message Date
Janne Grunau 767bd6c4e8 dav1d updates (#1883)
* dav1d: fetch seed corpus over https

* dav1d: use debugoptimized build instead of debug

* dav1d: add undefined behavior sanitizer

* dav1d: extend auto_cc list
2018-10-17 18:38:47 -07:00
Catena cyber 51e638b3d3 [gnupg] Limit size of inputs for gnupg import fuzz target (#1871)
* Limit size of inputs for gnupg import fuzz target

And adds the targets out of the diff

* Removes option limiting size for gnupg target import

As it is done in the target itself

* Removes max length options for fuzz targets in gnupg
2018-10-17 10:41:44 -07:00
Kevin Lubick ea855f048a [skia] Add more image codec fuzzers (#1882) 2018-10-17 06:42:10 -07:00
Ebrahim Byagowi 274b597587 [harfbuzz] Add a new place for looking for seeds (#1879)
Regarding https://github.com/harfbuzz/harfbuzz/pull/1258
2018-10-16 15:10:21 -07:00
Catena cyber 8607c4705b [libpcap] Adds people to libpcap ccs (#1878) 2018-10-16 08:03:37 -07:00
Oliver Chang 8a7d744e7e
harfbuzz: disable function,vptr in CXXFLAGS also 2018-10-16 10:04:53 +11:00
Nelson Elhage 1e4d186ed3 libgit2: Let fuzzers user internal headers (#1875) 2018-10-15 13:54:48 +11:00
Tim Rühsen 1734af5dca [wget] Use code from master branch (#1874) 2018-10-15 11:18:37 +11:00
Catena cyber 5884cad7db Do not use thread in openssl for ecc-diff-fuzzer (#1872) 2018-10-14 10:03:11 -07:00
Behdad Esfahbod d0f6761b98 [harfbuzz] Disable UBSan vptr again, since we still build with -fno-rtti (#1873) 2018-10-14 10:02:49 -07:00
Catena cyber fc4da53b77 [libpcap] Add project (#1756)
Adds libpcap project
2018-10-12 12:33:44 -07:00
pdknsk 7f8c385c8f [glib] GLib: integrate into build system (#1866)
* integrate into build system

* remove options file

* address review comment
2018-10-12 09:17:31 -07:00
James Zern e7c5398b61 code_coverage.md: fix coverage tool invocations (#1870)
s/profile/coverage/
2018-10-12 17:16:51 +11:00
Behdad Esfahbod 8d7039abee Update Harfbuzz settings (#1869)
* [harfbuzz] Remove UBSan exemptions

We are clean on all sanitizers now.

* [harfbuz] Seed corpus from more fonts

* [harfbuzz] Share seed corpus amongst the two sanitizers

Is this really what those archives are for?  Or just for archival?

* [harfbuzz] Remove hb-subset-get-codepoints-fuzzer

Folded into hb-subset-fuzzer upstream.
2018-10-12 13:50:04 +11:00
Max Moroz fdd28c42e9
[infra] Add srcmap step to code coverage job (follow-up #1547). (#1868) 2018-10-11 13:52:49 -07:00
Kevin Lubick 93eec08bbc Add Polyutils fuzz target (#1867) 2018-10-11 07:20:30 -07:00
Augie Fackler 8e87c896e2 mercurial: disable msan, hopefully only for a while (#1865)
Our new fuzzer requires CPython, and I'm getting extremely
confusing (and implausible-looking based on reading of CPython source)
msan issues, so let's disable msan for this project for now.
2018-10-10 07:03:23 -07:00
Alex Gaynor 0584bccf21 [spidermonkey] Fixed spidermonkey build by temporarily disabling cranelift (#1864) 2018-10-09 11:11:04 -07:00
Max Moroz 5c263869ae
[infra] Fix missing linking dependencies for coverage build (#1858). (#1863) 2018-10-09 11:04:03 -07:00
YannisGuyon 3c1aba15b5 [libwebp] webp_enc_dec: Limit alpha_quality to 99 when method is 6 (#1860)
webp_enc_dec: Limit alpha_quality to 99 when method is 6

The target fuzz_webp_enc_dec with asan crashes (timeout)
during encoding with heavy alpha compression.
Clamp alpha compression parameters for images bigger than 16*16.
Bug report 10838
2018-10-08 10:08:49 -07:00
Guido Vranken 2e867a3f6e [bignum-fuzzer] Add ARM e-mail address. Disable AFL (#1859)
* bignum-fuzzer: add ARM e-mail to auto_ccs

* bignum-fuzzer: only use libFuzzer, not AFL
2018-10-08 10:07:27 -07:00
Janne Grunau 2cb18963e8 [dav1d] add dav1d project (#1855)
dav1d is an AV1 decoder

http://www.jbkempf.com/blog/post/2018/Introducing-dav1d

Mozilla is planning to use the decoder in Firefox
https://bugzilla.mozilla.org/show_bug.cgi?id=1493397
2018-10-07 15:45:31 -07:00
Catena cyber 6666f7259c Fixe libecc build by ecc-diff-fuzzer (#1857) 2018-10-05 13:37:41 -07:00
Augie Fackler f03835210f [mercurial] Grant martinvonz@google.com access (#1856) 2018-10-05 13:16:56 -07:00
YannisGuyon b1b585f4da webp_enc_dec: Clamp slow parameters for big images (#1854)
* Add new fuzz target for encoding and misc

- Add fuzz_webp_enc_dec and adapt Dockerfile, build.sh
- Lint existing targets
- Add license headers
- Increase fuzz.dict

* webp_enc_dec: Convert input images to inline C arrays

Local files are not available on oss-fuzz servers.

* webp_enc_dec: Fix timeout by skipping crusher

The target fuzz_webp_enc_dec with msan crashes (timeout)
on a 128*128px image encoding with max compression (crusher).
Reduce crusher encoding to 16*16px and below.
Bug report 10423

* webp_enc_dec: Replace cruncher by lossy alpha encoding

The target fuzz_webp_enc_dec with msan crashes (timeout)
during encoding with max compression (cruncher).
Reduce alpha cruncher encoding to 16*16px and below.
Bug report 10634

* webp_enc_dec: Clamp slow parameters for big images

The target fuzz_webp_enc_dec with ubsan crashes (timeout)
during encoding with heavy compression. The cause can not
be easily removed without reducing performance.
Clamp compression parameters for images bigger than 16*16.
Bug report 10700
2018-10-04 13:33:12 -07:00
James Zern 72adedc68e av1_dec_fuzzer: vary thread count in range [2, 64] (#1840)
* av1_dec_fuzzer: vary thread count in range [2, 64]

use at most the first 100 bytes after skipping the file header to
calculate a hash used to create the thread count.

+ add missing includes, delete unused string.h

* av1_dec_fuzzer: use the first 32 bytes as a hash

This is the minimum required by this function as it's read and interpreted as the IVF file header

* av1_dec_fuzzer: use 1 header byte for thread count

this is less complex than using a hash and produces the same coverage, similar to:
https://github.com/ImageMagick/ImageMagick/blob/master/Magick++/fuzz/rotate_fuzzer.cc#L9-L16
https://cs.chromium.org/chromium/src/base/json/json_reader_fuzzer.cc?type=cs&q=json_reader_fuzzer&sq=package:chromium&g=0&l=20
2018-10-04 08:36:32 -07:00
Augie Fackler 91f0474ec3 mercurial: also slurp down a Python tarball (#1853)
An upcoming fuzzer need a Python install that was built with ASAN and
--without-pymalloc, so I need a tarball of Python to compile.
2018-10-04 08:35:31 -07:00
Jonathan Hui 00d6c55aa4 [openthread] enable coaps feature (#1851) 2018-10-04 17:27:36 +10:00
pdknsk 7b179a4a24 fix hg revision with uncomitted changes (#1849) 2018-10-02 10:52:49 -07:00
Max Moroz d39e0f7ea0 [infra] Restore srcmap binary back to base-builder image (follow-up #1848). 2018-10-01 23:13:59 -07:00
Abhishek Arya 4afcfab869
Revert "[infra] Remove srcmap related commands from gcb script (follow-up #1839)." (#1848)
This reverts commit f132eaf19c.
2018-10-01 22:34:05 -07:00
Max Moroz 730451d871 [infra] Update documentation (new coverage screenshots + some cleanup), follow-up #1839). 2018-10-01 08:13:41 -07:00
Max Moroz f132eaf19c [infra] Remove srcmap related commands from gcb script (follow-up #1839). 2018-10-01 08:02:38 -07:00
pdknsk c49f46fa0c [firefox] rename profile to coverage (#1841) 2018-10-01 06:43:58 -07:00
Max Moroz 7703e360de
[infra] Remove sancov and rename "profile" to "coverage". (#1839)
* [infra] Remove sancov and rename "profile" to "coverage".

* Bring coverage flags back.

* Update projects files that rely on SANITIZER="profile".
2018-10-01 06:43:21 -07:00
Mihai Maruseac 87e5fbf369 Update contact list for tensorflow (#1845)
Update contact addresses.
2018-09-27 12:17:34 -07:00
Kevin Lubick c29e9926f9 [skia] Fix build after some FuzzCommon renames (#1843)
* [skia] Fix build after some FuzzCommon renames

* Fix diff
2018-09-26 07:06:30 -07:00
Bhargava Shastry 4c01037865 [openvswitch] OvS: Refactor build.sh (#1844)
* OvS: Refactor build.sh

* OvS: Make use of corp dir name

* OvS: Revert URL in Dockerfile
2018-09-26 07:05:38 -07:00
Max Moroz 2331c308cd [infra] Use -merge=1 instead of -runs=0 for coverage (#1743, follow-up #1547). 2018-09-25 17:22:07 -07:00
Sebastian Rasmussen 02c1436e9f [mupdf] Add custom allocator to avoid having fuzzer kill process (#1830) (#1832)
This fixes oss-fuzz #5679 and oss-fuzz #7803 for the mupdf project.
2018-09-24 23:38:08 -07:00
YannisGuyon 42d2d37980 [libwebp] webp_enc_dec: Replace cruncher by lossy alpha encoding (#1838)
* Add new fuzz target for encoding and misc

- Add fuzz_webp_enc_dec and adapt Dockerfile, build.sh
- Lint existing targets
- Add license headers
- Increase fuzz.dict

* webp_enc_dec: Convert input images to inline C arrays

Local files are not available on oss-fuzz servers.

* webp_enc_dec: Fix timeout by skipping crusher

The target fuzz_webp_enc_dec with msan crashes (timeout)
on a 128*128px image encoding with max compression (crusher).
Reduce crusher encoding to 16*16px and below.
Bug report 10423

* webp_enc_dec: Replace cruncher by lossy alpha encoding

The target fuzz_webp_enc_dec with msan crashes (timeout)
during encoding with max compression (cruncher).
Reduce alpha cruncher encoding to 16*16px and below.
Bug report 10634
2018-09-24 07:09:48 -07:00
pdknsk f7fe63f804 firefox: fix build (#1837)
* simpler packaging

* fix build
2018-09-24 06:15:19 -07:00
pdknsk 9b1d911d0d [firefox] Fix profile build, enable ubsan, more (#1835)
* limit SdpParser to 25kB

* separate out mozconfig

* fix profile build

* accurate library handling

* cosmetic

* enable undefined sanitizer

* limit ContentSecurityPolicyParser to 15kB
2018-09-23 09:28:05 -07:00
pdknsk 59d86eb2e9 GLib: remove temporary fix (#1836)
* better project link

* revert #1772
2018-09-22 19:58:12 -07:00
YannisGuyon 908d4322f5 webp_enc_dec: Fix timeout by skipping crusher (#1831)
* webp_enc_dec: Fix timeout by skipping crasher

The target fuzz_webp_enc_dec with msan crashes (timeout)
on a 128*128px image encoding with max compression (crusher).
Reduce crusher encoding to 16*16px and below.
Bug report 10423
2018-09-20 08:00:35 -07:00
sebpop 7dd99e90cf [zlib-ng]: generalize creation of seed corpus (#1829)
The patch avoids listing fuzzer names in order to be able to add new upstream
fuzzers without having to worry about updating the oss-fuzz build script.
2018-09-19 17:48:15 -07:00
Max Moroz f2c2325e07 [poppler] Don't use WORKDIR $SRC (requested in #1784). 2018-09-19 13:34:04 -07:00
Max Moroz e348738942 [infra] Bump LLVM revision to r342582 to fix MSan issues. 2018-09-19 13:23:42 -07:00
Paul Dreik d6faca7235 [boost] Fix missing files in docker copy command (#1828)
* [boost] add fuzzers for boost property tree parsers

* [boost] fix missing files in Docker copy command
2018-09-19 12:13:18 -07:00
Bhargava Shastry ec8a3bff13 OvS: Add MSan (#1826) 2018-09-19 05:10:13 -07:00