Commit Graph

455 Commits

Author SHA1 Message Date
Even Rouault 3bee3afbf8 Add openjpeg to projects (#700)
From http://www.openjpeg.org/ :
"""
OpenJPEG is an open-source JPEG 2000 codec written in C language. It has
been developed in order to promote the use of JPEG 2000, a still-image
compression standard from the Joint Photographic Experts Group (JPEG).
Since may 2015, it is officially recognized by ISO/IEC and ITU-T as a
JPEG 2000 Reference Software
"""

I submit this integration of OpenJPEG into oss-fuzz on behalf of Antonin
Descampes (@detonin), one of the project leaders. The OpenJPEG side of the
integration has already been merged into openjpeg git master per
https://github.com/uclouvain/openjpeg/issues/965 /
1a8eac6a90
2017-07-05 07:58:07 -07:00
David Benjamin 1d8896038e Also CC svaldez for BoringSSL. (#697) 2017-06-30 17:37:04 -07:00
HinTak 10d03dac61 Adding myself to access freetype2's fuzzing results (#696)
Adding my gmail address to the list of people receiving freetype2's fuzzing results.
2017-06-29 21:52:09 -07:00
Phil Turnbull 0e1d44aeee New project: CommonMark (#694)
* [cmark] Add cmark_markdown_to_html fuzzer

* [cmark] Use correct filename for seed corpus

* [cmark] Use upstream fuzz harness

* [cmark] Do not use $WORK for temporary files

* [cmark] Generate seed corpus from michelf/mdtest repo

* [cmark] Add @kivikakk as an auto CC
2017-06-28 07:47:14 -07:00
Matt Johnston e17dcc7a73 Dropbear: Use correct path for options (#692) 2017-06-27 06:54:44 -07:00
Matt Johnston abdf4c4321 Disable hardened build flags (#690)
-pic prevents linking with static libz.a
2017-06-25 15:49:38 -07:00
Tim Rühsen c73575c035 Add libidn to oss-fuzz (#689) 2017-06-24 13:29:51 -07:00
Even Rouault 67e5e57270 GDAL: enhance exhisting netcdf patch (#688)
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2356

Patch contributed to upstream libnetcdf per
4779c8278f
2017-06-23 07:19:40 -07:00
Roman Lebedev af03d10626 RawSpeed: finish integration by adding fuzzing targets. (#685)
As discussed in the original PR#588, it may be better to
start with empty corpus, and see what happens. Even though
i have the full corpus set to get full (80%+) coverage, it
is quite likely to result in horrible performance.

Currently, the library is built with no external
dependencies - jpeg, zlib - not too sure if it makes sense
to fuzz those indirectly. And if i can built zlib in-tree,
building jpeg in-tree will be more complicated because it
does not have CMake build system.

As you can see, more than one fuzzing target is provided.
The RawSpeedFuzzer is the most global one, it will be
able to eventually cover all the code, others are more
fine-grained, and will only be able to cover some small
portion of the code. Thus, i suppose both the performance
and the coverage may win.

I did test this locally. Both the address and the undefined
configurations work.
2017-06-21 11:43:36 -07:00
Tim Rühsen b9e125f9df [libpsl] Install libidn2 from git and statically link the fuzz target against it (#680) 2017-06-20 15:03:06 -07:00
Paras Chetal 2d577f5251 [qubes-os] Initial integration of libqubes-rpc-filecopy fuzz target (#679)
* Add Dockerfile for qubes-linux-utils build

* Add the outline for fuzzer build

* Integrate libqubes-rpc-filecopy

* Remove BACKEND_VMM env var
2017-06-16 08:43:59 -07:00
Even Rouault 606d84b729 GDAL: add libcurl dependency (#677)
* GDAL: add libcurl dependency

* GDAL: move download of curl and netcdf sources in Dockerfile

* GDAL: add patch for libnetcdf

This fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2265

Patch submitted in libnetcdf upstream per
https://github.com/Unidata/netcdf-c/pull/427
2017-06-15 08:37:04 -07:00
Tim Rühsen 1353edfc44 Add libpsl to oss-fuzz (#670) 2017-06-09 15:49:58 -07:00
Max Moroz 058c07e93b [ffmpeg] Add John from Google to auto_ccs list. (#668)
* [ffmpeg] Add John from Google to auto_ccs list.

* Create project.yaml
2017-06-09 13:37:06 -07:00
Tim Rühsen eb6f8654b7 [wget2] Reflect better upstream integration (#660) 2017-06-08 07:25:56 -07:00
Nikos Mavrogiannopoulos a2c248a784 [gnutls] statically link with nettle and hogweed and avoid using gmp (#661)
This allows the memory sanitizer to track all variable assignment
and use.
2017-06-08 07:22:41 -07:00
Even Rouault bf2cf44c05 GDAL: only build libgdal.a, to fix building against hongfuzz engine (#657) 2017-06-07 12:03:20 -07:00
Oliver Chang 880af18177 Update project.yaml 2017-06-07 09:15:36 -07:00
Oliver Chang 8085d12389 Update project.yaml 2017-06-07 09:15:13 -07:00
Oliver Chang 411de9a99e Update project.yaml 2017-06-07 09:14:27 -07:00
Nikos Mavrogiannopoulos 412c33f34d added contributor to CCS list (#654) 2017-06-07 06:43:35 -07:00
Even Rouault 62c99c6ffa GDAL: add a patch to fix a leak in libnetcdf (#653)
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2129 identified a leak
in libnetcdf itself.

Patch submitted upstream as
https://github.com/Unidata/netcdf-c/pull/415
2017-06-07 06:43:10 -07:00
Even Rouault da0c9bdb4e [gdal] GDAL: add netCDF dependency (#652)
* GDAL: add netCDF dependency

Note that given the way GDAL will use it
(see https://trac.osgeo.org/gdal/changeset/38914 ), we won't fuzz netCDF files
themselves and test libnetcdf itself. Instead, for the purpose of oss-fuzz,
GDAL will use as input a text file (syntax of the ncdump/ncgen utilitis)
and will convert it to a (valid) netCDF file on-the-fly. This way we test how
the GDAL netCDF driver reacts, instead of potential bug in libnetcdf itself.

* GDAL: compile libnetcdf against libhdf5_serial to enable netcdf-4 support
2017-06-06 08:29:59 -07:00
Tim Rühsen 5bd65c6bc9 [wget2] Fix build, better upstream integration, added auto_ccs (#650) 2017-06-04 17:53:00 -07:00
Caolán McNamara 334a41554d add quattro pro corpus (#647)
and update dependency cache
2017-06-02 07:20:37 -07:00
Oliver Chang ca0b83b0e9 Disable honggfuzz for builds that are failing.
Revert once #646 is fixed.
2017-06-01 20:47:12 -07:00
Kostya Serebryany 5401205191 Update project.yaml 2017-06-01 09:29:43 -07:00
Kostya Serebryany 88f245f7f3 Delete standalone_fuzz_taget_runner.cpp 2017-06-01 08:45:55 -07:00
Kostya Serebryany 8ac575f3cd fix a typo in a file name 2017-06-01 08:44:52 -07:00
Tim Rühsen eb27381e17 [wget2] Fix .dict and .options names (#642)
* [wget2] Speed up build

* [wget2] Remove path from corpora in zip archive

* [wget2] Fix copying of option and dict files to
2017-06-01 08:19:09 -07:00
Nick Wellnhofer d463522d6e Update libxml2 auto_ccs (#641)
Add myself to libxml2 auto_ccs.
2017-06-01 07:14:43 -07:00
Jean-Philippe Ouellet b794dfe099 [qubes-os] New project: Qubes OS (#637)
Qubes OS wishes to improve its automated testing pipeline in various
ways, one of which being the introduction of continuous fuzzing.

The initial work will be performed by Paras Chetal as part of his
Google Summer of Code project [1], for which I am the mentor.

There are many pieces of code in Qubes OS which could benefit from
fuzzing, but initial focus is currently on the inter-vm file-copy
unpacker, and the GUI protocol [2][3].

According to [4], the way to request a new project be added to oss-fuzz
is for a member of the project to submit a PR here. I'm not an official
member of the Qubes OS team [5], but I am an active contributor.
Hopefully that's good enough...

[1]: https://summerofcode.withgoogle.com/projects/#5530206738579456
[2]: https://www.qubes-os.org/doc/gui/
[3]: https://github.com/QubesOS/qubes-gui-daemon/blob/master/gui-daemon/xside.c
[4]: https://github.com/google/oss-fuzz#accepting-new-projects
[5]: https://www.qubes-os.org/team/
2017-05-31 09:14:10 -07:00
robertswiecki bc305d99f3 Link final openssl targets with CXX instead of clang++, as afl/honggfuzz might be using custom compilers (#634) 2017-05-30 11:29:35 -07:00
Tim Rühsen 3d1773b3d4 Add GNU wget2 to oss-fuzz (#630) 2017-05-29 08:34:31 -07:00
Even Rouault 9eab6b6469 gdal: add contributor in CC list (#629) 2017-05-28 21:44:51 -07:00
Matt Kwong c3a1df5486 Update boringssl (#625) 2017-05-25 08:10:40 -07:00
Abhishek Arya e0e2d14e31 Update project.yaml 2017-05-24 21:18:47 -07:00
Abhishek Arya 11adc754c7 Fix build breakage after #623. 2017-05-24 18:05:40 -07:00
Kostya Serebryany 4952c9d012 Update project.yaml 2017-05-24 14:32:01 -07:00
Oliver Chang 7d454b344c Update README.md 2017-05-24 14:03:50 -07:00
Oliver Chang 803075bc3a Delete do_stuff_fuzzer.options 2017-05-24 14:02:06 -07:00
PhilipHazel c2cdffc0c1 Update build.sh (#623)
I have moved the cp command to the end of the file, as requested.
2017-05-24 09:07:19 -07:00
Tobias Brunner 2b27d9d0cc [strongswan] Build from master branch (#622) 2017-05-24 11:35:09 +02:00
Abhishek Arya 404fce66ab [ffmpeg] Fix build breakage due to nasm >= 2.13. (#620) 2017-05-24 09:56:59 +02:00
Abhishek Arya 247324f4d4 Update project.yaml 2017-05-22 09:20:35 -07:00
Matt Johnston e91a509873 Dropbear SSH fuzzer working (#618) 2017-05-22 08:24:44 -07:00
Even Rouault 10783accaf Add proj.4 project (#617)
proj.4 is standard UNIX filter function which converts
geographic longitude and latitude coordinates into cartesian
coordinates (and vice versa), and it is a C API for software
developers to include coordinate transformation in their own
software.

See http://proj4.org/

Note: it is used by the GDAL library, already in OSS-Fuzz.
2017-05-22 08:20:41 -07:00
Christian Grothoff 2183e03474 add libmicrohttpd (#613) 2017-05-16 18:18:19 -07:00
Kostya Serebryany 5b414908fd Update README.md 2017-05-15 18:44:54 -07:00
Kostya Serebryany d43cf3e1a7 Update README.md 2017-05-15 18:43:49 -07:00