Commit Graph

113 Commits

Author SHA1 Message Date
jonathanmetzman b41080b8f2
Improve fuzz introspector documentation. (#8859)
Fix grammar, wording, and make it clearer what fuzz introspetor offers.

(make changes suggested in https://github.com/google/oss-fuzz/pull/8800)
2022-10-25 15:58:11 -04:00
Julien Voisin 3c95350db6
Document file GitHub issue (#8810)
Co-authored-by: Julien Voisin <jvoisin@google.com>
2022-10-19 14:04:58 -04:00
Fabian Meumertzheim 5b1953b201
infra/java: Improve reproducibility of memory issues (#8736)
When reproducing, use slightly lower limits on heap and stack size so
that minimal changes to fuzz targets, fuzzer and runtime do not cause
memory issues to fail to reproduce.
2022-10-19 13:51:06 -04:00
Navidem 45c5e45aa9
Add Monitoring via Fuzz Introspector (#8803) 2022-10-18 11:06:16 -07:00
jonathanmetzman 81326f0a39
Update integration_rewards.md
Make it easier to find application
2022-09-08 12:09:19 -04:00
Dongge Liu 22488896f6
Centipede integration (#8046)
* Add Centipede as a fuzzer

* Specify dictionary param of Centipede

* Update docs

* Mark Centipede as experimental

* More accurate description

* Remove garbage

* Simplify code

* Move mkdir to dockerfile

* Add the weak.c trick

* Install deps with Centipede's script & uninstall new deps

* Fix doc

* Reuse libweak_sancov_stubs.so

* Reorganise flags

* format

* Consistent file type

* Reuse the weak references defined in Centipede

* Replace the shared library of weak symbols with a static one

* Correct the place to call mkdir

* Allow 2G of SHM for Centipede

* Create dirs in run_fuzzer

* Keep Centipede up-to-date

* Avoid duplicating Centipede's binary

* The params of Centipede and their explanations

* The engine info of centipede

* Save the target binary (with san) in a subdir of the project

* Set the target (with san) dir in check_build

* Create the target (with san) first to avoid side-effects

* Fic clone

* Fix format

* Add periods

* Fix comments

* Fix dirs

* Fix parameters

* Adding Centipede as a fuzzing engine for Scarecrow

* Add CI support

* Represent sanitizer with a variable

* Remove the unnecessary definition of FUZZER_OUT

* Reorganise binary directories

* format

* A minor note

* Present issues with dirs that alread exist

* Use os.path.join to join path

* Make a function to get the out/ in check build

* Reusing existing flags in .bazel

* Avoid hardcoding sanitizer, set rss_limit_mb=4096, leave address_space_limit_mb disabled

* Better ways to add bazel build options

* A better way to add bazel flags

* Remove redundant --bazelrc

* Better Cohesion

* Avoid code duplication

* Simplify code

* Exit on crash
2022-09-06 02:34:58 +00:00
Greg Myers 63dc00af00
Fix typos in rust_lang.md and cryptofuzz readme (#7362) 2022-08-17 12:31:05 -04:00
AdamKorcz d04436b85c
Docs: Add info about golang dependencies (#8159)
Signed-off-by: AdamKorcz <adam@adalogics.com>
2022-08-05 10:36:22 -04:00
M Hickford 8b2be73d66
Link to compile_native_go_fuzzer script source (#8066) 2022-07-23 17:09:33 +01:00
Evgeny Vereshchagin 25bb9af326
[docs] point to the right systemd branch (#8056)
GitHub redirects it to the main branch but it keeps saying that
the branch was renamed and it's distracting.
2022-07-22 13:40:35 +01:00
M Hickford 6bce362a80
Link to Go fuzzing docs (#8054) 2022-07-22 13:39:20 +01:00
jonathanmetzman 9f236c1c9c
Update new_project_guide.md (#7477) 2022-03-30 10:43:25 -04:00
jonathanmetzman 33a3672774
Mention ASAN false positives. (#7427)
Fixes: https://github.com/google/oss-fuzz/issues/7421
Related: https://github.com/google/oss-fuzz/issues/2746
2022-03-23 11:33:19 -04:00
AdamKorcz de14727b89
native Go fuzzing: Update docs (#7286) 2022-02-15 11:52:36 +00:00
AdamKorcz 4fdde05cff
[draft] Integrate native go fuzzing (#7055) 2022-02-09 06:57:00 +11:00
jonathanmetzman 82bc258fde
[ClusterFuzzLite] Support local runs (#6987) 2022-01-19 17:24:47 -05:00
AdamKorcz 2647a94114
[cifuzz] Small correction to docs (#6905) 2021-11-29 22:34:10 -05:00
DavidKorczynski 8d6d825b9f
docs: remove statement on naming seed with sha1 values as it is no longer valid (#6754) 2021-11-03 16:09:56 -04:00
Fabian Meumertzheim 6562f44c8a
Fix builds after Jazzer breaking change (#6622)
Follow-up to f043a72a0e, which became necessary due to
24069c3885
2021-10-20 17:24:25 +00:00
DavidKorczynski d59c8adb4f
doc: explicitly mention dynamic and static linking of fuzzers (#6428)
* doc: explicitly mention static and dynamic linking of fuzzers.

* doc: add comma.
2021-09-12 21:09:30 -07:00
Catena cyber 0e3ee07ffd
doc: use lang-specific base-builder images (#6415) 2021-09-08 09:13:52 -07:00
Catena cyber dd8e46c38b
Swift ideal integration (#6312)
* Helper flags for swift compilation

* Documentation for swift project integration

* Adds swift to the languages with coverage

* Only thread sanitizer is supported

* Fixes swift coverage target compilation

* fixup flags facotring

* swift: run on new ubuntu

* fixup

* swift: right copy for symbolizer
2021-09-02 14:56:01 -07:00
jonathanmetzman 6bcbae307c
[Ubuntu Upgrade][docs] Say need to build msan deps manually (#6238)
* [Ubuntu Upgrade] Upgrade msan parts to reflect new reality.

All dependencies must be built with MSAN by the project.
OSS-Fuzz will not be providing any instrumented libraries.

Related: https://github.com/google/oss-fuzz/issues/6180
2021-08-19 20:06:12 -07:00
Oliver Chang f9d0813ea8
minor cflite build integration docs changes. (#6240)
- Minor clarification about this using OSS-Fuzz's build chain. Be
  consistent about calling this part OSS-Fuzz (rather than
  ClusterFuzzLite), since that's what the image name says.

- Add project.yaml documentation.

- Refer to OSS-Fuzz's guide for efficient fuzzing.

Related: #6196
2021-08-20 11:37:55 +10:00
asraa 30d927e324
New base builder without lang specific installation + swift base (#5986)
Removes unnecessary stuff in base-builder image to create a base-builder-new, and then adds a base-builder-swift on top of this that swift projects can use (without JVM/Go/etc fuzzing).
2021-08-20 09:52:44 +10:00
olivekl 3ca919279a
Clarify language in continuous_integration.md (#6227)
Clarify AND (not OR) for situations when crashes are reported
2021-08-16 09:00:35 -07:00
olivekl 926914100c
Update bazel.md (#6228)
Fix typo (though --> through)
2021-08-16 16:54:03 +01:00
Fabian Meumertzheim 4f34600051
[docs] Enable AWT headless mode in Java guide (#6155)
Fixes https://github.com/google/oss-fuzz/pull/6105#issuecomment-887950308.
2021-08-04 10:18:09 +01:00
Fabian Meumertzheim 73d78b8879
[infra][jvm] Add Jazzer UBSan support (#5898)
* [infra][jvm] Add Jazzer UBSan support

* [java-example] Reenable and plant UB

* [docs] Mention support for Java UBSan in docs

Also adds a link to the java-example build.sh to the docs.
2021-06-10 07:57:42 -07:00
Catena cyber 062a64b05e
docs: CIFuzz requires a project to be cloned with git (#5886) 2021-06-07 11:34:17 -07:00
Abhishek Arya 5766e32e90
Update rust_lang.md 2021-06-05 08:44:21 -07:00
DavidKorczynski 37d02c6ed3
Docs: update rust documentation (#5877)
* added initial description for writing rust fuzzers.

* updated rust docs.
2021-06-05 08:42:18 -07:00
olivekl 684c6c13c6
Update new_project_guide.md (#5805)
* Update new_project_guide.md

Rewrite instructions under "Temporarily disabling code instrumentation during builds" section for greater clarity.

* Update new_project_guide.md
2021-05-20 11:28:04 -07:00
Fabian Meumertzheim 10e888b561
[all] Make fuzz targets world executable (#5751)
Making fuzz targets only user executable as the root user makes them
non-executable outside the container, e.g. in the oss-fuzz/build/ dir.
2021-05-12 07:03:21 -07:00
olivekl 40def4aae7
Update accepting_new_projects.md (#5750)
Fix formatting in new project submission guidelines
2021-05-11 12:29:46 -07:00
MarcoFalke d73251e6fe
docs: Fix syntax error typo (#5710) 2021-05-04 15:19:08 +01:00
MarcoFalke e3eef732c4
doc: Explain fuzzing_engines (#5704)
Also fix some dead links
2021-05-03 15:41:15 -07:00
Bruno P. Kinoshita d38fd0220a
Fix typos and one link (#5645)
* Fix link to Jenkins

* Typos

* Fix builder, not jenkins.

Co-authored-by: Abhishek Arya <inferno@chromium.org>
2021-04-20 15:46:16 -07:00
Stefan Bucur df561687f6
Update the Bazel project integration guide to capture the new simpler tool. (#5550)
* Update the Bazel project integration guide to capture the new simpler tool.

* Update bazel.md

Co-authored-by: Abhishek Arya <inferno@chromium.org>
2021-03-31 17:46:08 -07:00
AdamKorcz d9d81a1011
Fix minor typo in docs (#5540) 2021-03-31 06:50:53 -07:00
Stefan Bucur 589afcfbd1
Clarify in the new project guide that pull_images may be needed for coverage runs. (#5506) 2021-03-25 07:43:18 -07:00
van Hauser c0d989a5f4
update documenation (#5462)
* output afl++ setup

* update commit id

* update afl++ commit id

* asan + cmplog fix

* update commit id

* update and enhance afl++

* update afl++ commit id, better run asan options

* fix linter

* add debug_afl script

* Update debug_afl

* Update compile_afl

* fix for karchive

* put debug_afl in the docker container

* asan poison fix

* fix asan settings for zeek

* update afl++ commit id

* fix

* update afl++ commit id

* final touches

* remove map size

* remove old comment

* llvm 13 fix

* enhance documentation

* fix capstone build.sh

* update doc

Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
2021-03-21 18:56:53 -07:00
jonathanmetzman 849965d539
[docs] Change wording regarding i386 fuzzing. (#5449)
Mention that only some projects will benefit.
Fixes: #4752.
2021-03-20 08:30:38 -07:00
Oliver Chang 5a00fd347e
Modify deadline text to disclose immediately after fix is released. (#5323) 2021-03-12 09:34:56 +11:00
Fabian Meumertzheim c69f3e8a51
Add docs for Java/JVM fuzzing (#5298)
Related: https://github.com/google/oss-fuzz/issues/5178
2021-03-05 07:22:24 -08:00
Zac Hatfield-Dodds 796938bae0
Recommend Ghostwriter (#5246) 2021-02-25 05:58:31 -08:00
Catena cyber 1e03eb94af
Go 1.16 more fixes (#5239)
* Fixes cilium build

* Fixes dragonfly build

* Fixes fasthttp build

* Fixes fastjson build

* golang build: change directory only temporary

* Fixes gitea build

* Fixes grpc-gateway build

* Fixes hugo project build

* Fixes ipfs build

* Fixes jsonparser build

* Fixes kubernetes build

* Fixes loki build

* Fixes minify build

* Fixes nats build

* Removes go get from the docs

* Fixes quic-go build

* Fixes radon build

* Fixes syzkaller build

* Fixes tidb build

* Fixes vitess build
2021-02-22 15:25:47 -08:00
jonathanmetzman 28b35e36fe
[CIFuzz] Support languages non-C++ projects (e.g. Python projects) (#5222)
Allow use of non-C++ projects by specifying the language in the workflow file.
Fixes #5195
2021-02-19 11:54:15 -08:00
jonathanmetzman e93f222966
[CIFuzz] Fix handling of sanitizer artifacts (#5182)
Fixes #5175
1. Put sanitizer in artifact name.
2. Fix parsing of non-ASAN stacks.
2021-02-18 09:57:34 -08:00
jonathanmetzman fa46369f1e
[CIFuzz] Note which languages are supported (#5208)
Related #5195
2021-02-18 07:42:40 -08:00