Commit Graph

4017 Commits

Author SHA1 Message Date
Jonathan Foote 22ea026e30
[wasmtime] fix security@bytecodealliance.org alias (#3307) 2020-01-29 18:43:23 -08:00
Joe Drago 39e5ab2d6e
libavif support (#3302) 2020-01-29 15:13:45 -08:00
Leo Neat 4d5e5016c0
[Infra] Update print statements (#3305) 2020-01-29 14:10:04 -08:00
Micah Snyder 606824ae7c
[ClamAV] Disable mempool at compile time (#3304)
ClamAV's mempool feature uses mmap to improve performance for some
memory allocations. As currently implemented, on systems that support
mmap's MAP_ANONYMOUS flag, fmaps are backed by mmap'd memory.
Valgrind and ASan can't track mmap-backed memory, though, so it's more
difficult to track down fmap-related memory errors.

The changes in this commit to clamav's build script should disable mmap
usage, and hopefully allow oss-fuzz to catch more bugs.
2020-01-29 12:12:15 -08:00
Leo Neat 8ffc6db00c
[Infra] CIFuzz pipeline complete. (#3281)
* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Testing action build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working build

* Working fuzzers with out error surface

* Working fuzzers with out error surface

* Working fuzzers with out error surface

* Printing std err

* Adding fuzzer timeout

* Adding fuzzer timeout

* Changing fuzzer timeout to fuzz time

* Formatting and refactoring

* Spelling in fuzz_target.py

* Spelling in fuzz_target.py

* Spelling in fuzz_target.py

* Upload artifact fix

* Upload artifact fix

* Upload artifact fix

* Upload artifact fix

* Upload artifact fix

* Upload artifact fix

* Upload artifact fix

* Refactoring error codes.

* reverting helper.py

* reverting helper.py

* reverting helper.py

* chaning method to static

* moving cifuzz file

* Jonathan changes

* Oliver and Jonathan comments

* Oliver and Jonathan comments

* Oliver and Jonathan comments

* Utils unit tests

* Test formatting and documentation

* Build fuzzer test added

* Changed repo manager errors

* Unit and integration tests complete

* Jonathan comments pt.1

* Jonathan comments pt.1

* Jonathan comments pt.1

* adding cifuzz_test

* Build fuzzer test completed

* Run fuzzers test finished.

* Removed SRC dependency

* Jonathan comments pt.2

* Max comments pt.1

* Max comments pt.2

* removing log specified out stream

* Max comments pt.3

* Adding OSS_FUZZ_HOME env var

* Jonathan comments pt.3

* Formatting

* Olivers comments

* Jonathan comments
2020-01-29 11:03:43 -08:00
Even Rouault 4dc4c0240f
[PROJ4] Build libtiff from source to create a static archive (#3303)
Previously we linked against the dynamic libtiff library, but this
didn't work when running the fuzzers.
This time, actually tested by launching
python infra/helper.py run_fuzzer $PROJECT_NAME proj_crs_to_crs_fuzzer
2020-01-29 08:39:31 -08:00
Marcus Meissner 1e9cae0bdf
[libexif] also fuzz exif makernotes (#2913)
* also fuzz makernotes

* add me as secondary libexif helper

* libexif new test adjusted after review, also use same indentstyle
2020-01-28 14:26:04 -08:00
Alex Crichton 96c9cd26c2 Try to fix the wasmtime Rust build (#3298)
This is an attempt to fixup the errors found on #3292. Although I'm not
certain where the error was coming from this switches the Rust
installation to being in `PATH` by default so there's no need to
`source` any scripts to get access to the Rust compiler.
2020-01-28 06:41:49 -08:00
Catena cyber e82397baf6 Updates project ecc-diff-fuzzer build (#3295) 2020-01-27 07:14:41 -08:00
Nick Wellnhofer 01d2f67400 [cmark] Add myself to auto_ccs (#3296)
Approved by @jgm here:
https://github.com/commonmark/cmark/pull/326#issuecomment-578393351
2020-01-27 07:14:17 -08:00
Jonathan Foote 038d4ac14a [wasmtime] initial integration (#3292) 2020-01-27 06:40:46 -08:00
Even Rouault d56ec878e0 [PROJ4] Fix build / move build script to PROJ repository itself (#3294) 2020-01-26 12:45:01 -08:00
Catena cyber 57601d4b6c [mysql] Rebased patch for mysql (#3279)
* Rebased patch for mysql

* Fix viofuzz

* Fix patch
2020-01-23 16:56:13 -08:00
Yash Tibrewal c89b97b0fb [grpc] Remove api_fuzzer from grpc (#3291) 2020-01-23 15:24:40 -08:00
Jonathan Foote 7964a95f75 [wasmtime] Add project.yaml (#3285) 2020-01-23 10:02:49 -08:00
jonathanmetzman 2bcc2bfe2b
[cifuzz][bisection] Make BuildData a namedtuple (#3282) 2020-01-23 09:48:09 -08:00
Nick Mathewson d435df7f50 [Tor] Build libevent with --disable-openssl (#3289)
* [Tor] Build libevent with --disable-openssl

Libevent's build is failing because it can't find openssl.  We could
try to fix this, but instead let's disable it: Tor doesn't actually
use Libvent's openssl support.

* [tor] Use zip -q to make logs shorter.

Suggestion from Max Moroz.
2020-01-23 08:53:45 -08:00
Max Moroz 25cb4621aa
[rapidjson] Fix the indentation in project.yaml. (#3290) 2020-01-23 07:29:38 -08:00
Max Moroz 9918ef3f67
[infra] Make presubmit script handle experimental flag in project.yaml (#3277). (#3280)
* [infra] Make presubmit script handle experimental flag in project.yaml (#3277).

* make Travis happy

* address review feedback

* fix one more comment

* fix yaml file and address review feedback
2020-01-23 07:20:59 -08:00
Sean Kau 8e2d57684b Switch Ghostscript to upstream freetype (#3286)
* Switch to freetype library.

Reintegrate freetype

* remove pkg-config dependency
2020-01-22 18:24:10 -08:00
Yang Gao 9f2563c1ba grpc owners list update (#3283)
* gRPC improvements

* Update owners list
2020-01-22 15:46:23 -08:00
David Bryant 1a28141940 wavpack: add undefined behavior sanitizer (#3284) 2020-01-22 15:46:10 -08:00
asraa 5a00564e1d [envoy] Add support for dictionaries (#3247)
* Add support for dictionaries

Signed-off-by: Asra Ali <asraa@google.com>

* multiple dictionaries

Signed-off-by: Asra Ali <asraa@google.com>

* find instead of mv

Signed-off-by: Asra Ali <asraa@google.com>
2020-01-22 10:38:59 -08:00
Nikos Mavrogiannopoulos 2741c408c4 [gnutls] updated maintainers (#3278)
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-01-22 06:47:12 -08:00
Max Moroz a7b8f17290
[zlib-ng] enable dataflow config (#1632). (#3276)
Tested with https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F1890c88d-999b-4a95-9d21-20fa60f33e59&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:46:42.489000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T23:43:33.616Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T20:51:17.760469836Z
2020-01-21 16:23:14 -08:00
Max Moroz ff1441905c
[wolfssl] enable dataflow config (#1632). (#3274)
* [wolfssl] enable dataflow config (#1632).

Tested with https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2Fe577cd61-fcc2-42bd-90ec-b199371d2682&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:46:39.985000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T23:43:32.057Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T19:05:52.366118139Z

* Update project.yaml

* Update project.yaml
2020-01-21 16:20:00 -08:00
Max Moroz f068aedd8d
[mupdf] enable dataflow config (#1632). (#3272)
Tested with https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F9e804198-492a-4762-8551-928c66a8b4e1&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:45:43.424000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T23:43:14.050Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T20:24:16.755968968Z
2020-01-21 16:16:43 -08:00
Max Moroz 3edf60511e
[capstone] enable dataflow config (#1632). (#3262)
* [capstone] enable dataflow config (#1632).

Should work based on https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2Fb106a717-7725-44c6-81a5-e196300b9401&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T22:41:43.490000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T22:41:40.447Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T19:58:48.579291555Z, but uploading as an explicit PR to let Travis double check me.

* Update project.yaml

* Update project.yaml
2020-01-21 16:13:25 -08:00
Max Moroz 42c53a83bd
[libwebp] enable dataflow config (#1632). (#3271)
* [libwebp] enable dataflow config (#1632).

Tested as https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F8b9c16ef-8238-44c1-817c-03602fff5583&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:43:43.816000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T23:43:11.054Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T19:46:16.396688731Z

* Update project.yaml
2020-01-21 16:12:37 -08:00
Max Moroz 26f417c071
[libpcap] enable dataflow config (#1632). (#3269)
* [libpcap] enable dataflow config (#1632).

Tested with https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F1dd2ae2d-de8e-473a-be47-f5a4d8b91250&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:37:48.115000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T23:37:46.301Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T19:04:23.178909352Z

* Update project.yaml
2020-01-21 16:04:19 -08:00
Max Moroz ba88ba3cfe
[libplist] enable dataflow config (#1632). (#3270)
Tested with https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F122eb1f3-a362-4767-9d30-b4a0eb1a00fc&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:39:24.329000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeStart=2020-01-21T22:39:24.581Z&dateRangeEnd=2020-01-21T23:39:24.581Z&interval=PT1H
2020-01-21 16:03:34 -08:00
Max Moroz cbaa1b4762
[harfbuzz] enable dataflow config (#1632). (#3264)
Should work based on https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F3312be9f-7e2e-45c4-9544-eb432eba8c2e&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T22:51:43.343000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T22:51:41.725Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T21:13:26.578865217Z, but double checking with Travis.
2020-01-21 16:03:26 -08:00
Max Moroz 98b573a814
[pcre2] enable dataflow config (#1632). (#3268)
* [pcre2] enable dataflow config (#1632).

* Update project.yaml
2020-01-21 16:03:15 -08:00
Max Moroz af0146f185
[cmark] Enable dataflow config (#1632). (#3263)
Should work based on https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2Ffd035ed9-bbd9-4371-98ec-20d651567cee&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T22:47:00.300000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T22:46:58.339Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T19:28:33.870235967Z, but letting Travins double check.
2020-01-21 15:59:48 -08:00
Max Moroz 4e9aa50546
[json-c] enable dataflow config (#1632). (#3265)
Should work based on https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2F3fc8371d-951a-4003-9ce5-97d4adaf449c&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T22:54:26.943000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T22:54:25.085Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T18:50:28.370948047Z, double checking with Travis.
2020-01-21 15:59:06 -08:00
Max Moroz 98c81e6a5d
[wuffs] enable dataflow config (#1632). (#3275)
Tested with https://pantheon.corp.google.com/logs/viewer?resource=build%2Fbuild_id%2Fb5b0bd85-2754-4b7e-b388-e0e9615023a8&project=oss-fuzz&minLogLevel=0&expandAll=false&timestamp=2020-01-21T23:46:40.714000000Z&customFacets=&limitCustomFacetWidth=true&dateRangeEnd=2020-01-21T23:43:30.052Z&interval=PT1H&dateRangeUnbound=backwardInTime&scrollTimestamp=2020-01-21T18:53:52.366704300Z
2020-01-21 15:57:03 -08:00
Max Moroz d57400cae3
[openthread] enable dataflow config (#1632). (#3273) 2020-01-21 15:56:30 -08:00
Max Moroz a37f237ca5
[infra] Add fuzzing_engines section for the project.yaml. (#3267)
* [infra] Add fuzzing_engines section for the project.yaml.

* Update presubmit.py

* Update presubmit.py

* Update presubmit.py
2020-01-21 15:48:09 -08:00
Max Moroz 2c6c6d9785
[infra] Prioritize short files when collecting dataflow traces (#1632). (#3254)
* [infra] Prioritize short files when collecting dataflow traces (#1632).

* remove debug print

* rename files and sizes dict
2020-01-21 13:09:07 -08:00
Robert Löhning 87df2b147a [qt] Add bash function for building fuzz targets (#3261)
* [qt] Add bash function for building fuzz targets

* Fix assignments

* Fix building corpus

* Fix reading of optional parameters

* Move module to separate parameter
2020-01-21 09:26:25 -08:00
Max Moroz 0b95fe1039
Revert "[xz] Apply a harmless local patch to migrate to $LIB_FUZZING_ENGINE. (#3252)" (#3260)
This reverts commit 13555d96ab.
2020-01-21 08:23:42 -08:00
Ebrahim Byagowi da07464524 [harfbuzz] Add ckitagawa (#3258)
Calder likes to get CC'd to recent fuzzer failures and
plans to develop more subset features so let's update the CC list.
2020-01-21 06:52:37 -08:00
Tyson Smith 5adf79b336 [vorbis] updates (#3255)
* [vorbis] Remove $LIB_FUZZING_ENGINE migration workaround

* [vorbis] Add additional corpus
2020-01-17 22:55:39 -08:00
Max Moroz bb85046cb9
[vorbis] Apply a harmless local patch to migrate to $LIB_FUZZING_ENGINE. (#3253) 2020-01-17 14:01:10 -08:00
Max Moroz 13555d96ab
[xz] Apply a harmless local patch to migrate to $LIB_FUZZING_ENGINE. (#3252) 2020-01-17 14:00:54 -08:00
Max Moroz 5dd3f4cebe
[infra] Add env variable to the DF collection GCB step (#1632). (#3250)
* [infra] Add env variable to the DF collection GCB step (#1632).

* format
2020-01-17 13:06:27 -08:00
Even Rouault dcf68ac497 [GDAL] Update download URL for netCDF dependency (#3248) 2020-01-17 10:35:31 -08:00
Max Moroz f6002f6139
[infra] Collect dataflow traces on the builder (#1632). (#3238)
* [infra] Skeleton of the changes needed for collecting DFT on the builder (#1632).

* move ENGINE_INFO to the helper as well

* make collect_dft +x

* syntax fixes

* add actual dataflow tracer script

* format

* more refactoring and cleanup

* format

* address Oliver's feedback

* format

* more fixes

* format

* do not redirect stderr to stdout

* add exit at the end of main

* address feedback from Oliver
2020-01-17 06:24:15 -08:00
Antoine Pitrou 3a9400d3a2 [arrow] Edit auto-ccs (#3243) 2020-01-16 15:26:01 -08:00
Robert Löhning 8ded82c81e [qt] Add fuzz target for QTextDocument::setHtml (#3245) 2020-01-16 15:07:24 -08:00