Commit Graph

5027 Commits

Author SHA1 Message Date
AdamKorcz ec5f5b0d0f
golang: minor updates (#8400)
Signed-off-by: AdamKorcz <adam@adalogics.com>

Signed-off-by: AdamKorcz <adam@adalogics.com>
2022-09-02 20:29:05 +01:00
Paulo Gomes 4714950e17
fluxcd: Revert to base-builder-go to fix build (#8397)
fluxcd: Revert to base-builder-go
The project recently started moving into Go fuzz native, and using
the codeintelligencetesting variant is causing the error below:
ERROR: no interesting inputs were found

This PR reverts https://github.com/google/oss-fuzz/pull/7683 for fluxcd
which fixes the issue.

Signed-off-by: Paulo Gomes <pjbgf@linux.com>

Signed-off-by: Paulo Gomes <pjbgf@linux.com>
2022-09-02 18:47:02 +01:00
Daiki AMINAKA 50f1686323
[msquic] initial integration (#8381) 2022-09-02 13:52:10 +00:00
Henry Lin 64bc43dfb4
Retrofit: Initial integration (#8392) 2022-09-02 09:49:43 -04:00
Damien Miller 017cf397ca
[openssh] Turn off toolchain hardening flags in configure (#8394)
turn off toolchain hardening flags in configure

these seem to clash with the oss-fuzz environment leading to weird
crashes like monorail #50678

Co-authored-by: Damien Miller <djm@google.com>
2022-09-02 11:12:01 +01:00
Henry Lin 7b26bfcaa9
Tomcat: Improve fuzz targets (#8393)
Tomcat: Enhance fuzz targets
2022-09-01 16:44:30 -07:00
AdamKorcz 6752ebd9af
golang: add fuzzer (#8391)
Signed-off-by: AdamKorcz <adam@adalogics.com>

Signed-off-by: AdamKorcz <adam@adalogics.com>
2022-09-01 22:56:03 +01:00
AdamKorcz 281dc4276d
golang: modify fuzzer (#8390)
Signed-off-by: AdamKorcz <adam@adalogics.com>

Signed-off-by: AdamKorcz <adam@adalogics.com>
2022-09-01 22:05:17 +01:00
Naveen 123f3fa892
New : OSSF Scorecard webapp (#8388)
* New : OSSF Scorecard webapp

- Fuzzing scorecard webapp

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

* Fixed the path in the Dockerfile

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

* New : OSSF Scorecard webapp

- Fuzzing scorecard webapp

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

* Fixed the path in the Dockerfile

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

* Fixed the year in the header.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-01 17:57:24 +00:00
vargen defe7e091d
[dom4j] initial integration (#8385) 2022-09-01 12:30:11 -04:00
aschaich 2367c55b20
[hibernate-orm] Initial Integration (#8382) 2022-09-01 12:29:46 -04:00
Patrice.S d3456fc09f
spring-boot-configuration-processor: Initial integration (#8387)
Add JsonMarshallerFuzzer
2022-09-01 12:29:12 -04:00
vargen c696d87010
adding project maintainer (#8386) 2022-09-01 14:52:47 +01:00
DavidKorczynski e93fb6ddbe
ffmpeg, libarchive: bump automate to fix builds (#8383)
Similar to: https://github.com/google/oss-fuzz/pull/8365

Signed-off-by: David Korczynski <david@adalogics.com>

Signed-off-by: David Korczynski <david@adalogics.com>
2022-09-01 12:10:53 +01:00
Patrice.S 21ddaca38a
spring-aop: Initial integration (#8379)
Add AspectJExpressionPointcutFuzzer
2022-08-31 09:52:42 -07:00
aschaich 7f8684c89b
[spring-framework] Intial Integration for jdbc (#8359)
* [spring-framework] Apply patches in the Dockerfile

Applying patches is part of the sourcecode retrieval, which
we do in the Dockerfile, so apply the patches as part of the
Docker image creation, too.

While here, compile and install _all_ java files rather then
only those ending on "Fuzzer.java", and use a "real" git
checkout, which is required for more "advanced" git features,
most notoriously "log".

* [spring-framework] Use cp over mv in build.sh

Copying the files rather then moving them brings us one step
closer to being re-runable w/o restarting the docker container

* [spring-framework] shadow all our jar files

Also refactor the build.sh and Dockerfile to allow us adding
shadowJars more straightforwardly

* [spring-framework] Also build orm and jdbc, remove commented code

* [spring-framework] Copy all .class files to $OUT/

* [spring-framework] Use install over cp

* [spring-framework] Initial Integration for jdbc

* [spring-framework-jdbc] add copyright headers
2022-08-31 09:47:57 -07:00
aschaich e51830c2d4
[osgi] Initial Integration (#8378)
* [osgi] Initial Integration

* [osgi] Add trailing slashes to Docker COPY instructions
2022-08-31 11:55:21 -04:00
Patrice.S aa9ff740ea
spring-cloud-commons: Handle IllegalArgumentException & remove shade plugin from pom file (#8352)
Handle IllegalArgumentException, remove shade plugin from pom file
2022-08-30 20:14:00 +00:00
Tyson Smith 8d2c42e395
[openh264] Update vendor_ccs list (#8376) 2022-08-30 15:58:14 -04:00
DavidKorczynski b2ec83454d
lcms: extend fuzzing suite (#8375)
* lcms: extend fuzzing suite

* actually use the dstFormat
2022-08-30 19:36:00 +01:00
DavidKorczynski 00089cf2e3
pyparsing: initial integration (#8266) 2022-08-30 10:02:38 -07:00
Arthur Chan e23701f9d5
kafka-python: intial integration (#8017)
* kafka-python: intial integration
Create fuzzers

* Fix project initialization
2022-08-30 10:20:14 -04:00
MacroFake e9c13b3c19
bitcoin-core: Bump clang to remove one workaround, and add one (#8374) 2022-08-30 10:03:59 -04:00
DavidKorczynski f13cc912e6
looker-sdk: initial integration (#8322) 2022-08-30 09:59:14 -04:00
DavidKorczynski fce522567b
pyrsistent: initial integration (#8234) 2022-08-30 09:58:02 -04:00
DavidKorczynski 05b2e6dd5e
pyodbc: initial integration (#8347)
* pyodbc: initial integration

* set up correct types in odbc driver
2022-08-30 10:35:05 +01:00
aschaich befe610a4d
[apache-commons-logging] Initial Integration (#8362) 2022-08-29 16:20:50 -07:00
Samuel Karp e35a81f491
containerd: add some maintainers to auto_ccs (#8371)
https://github.com/containerd/project/blob/main/MAINTAINERS

Signed-off-by: Samuel Karp <samuelkarp@google.com>

Signed-off-by: Samuel Karp <samuelkarp@google.com>
2022-08-29 21:53:29 +00:00
DavidKorczynski 15bf80e2ec
lcms: extend to have double as source format (#8372)
* lcms: extend to have double as source format

srcFormats of double was supported but never actually hit, which is due
to the bits in the srcFormat not actually being accurate, e.g.
T_BYTES(srcFormat) == 0 would never be satisfied. This includes in the
cms_transform_fuzzer. This is an effort to overcoming this.

* lcms: avoid timeouts by only running a single test per iteration

Fixes: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50723
2022-08-29 22:37:13 +01:00
Martin Holst Swende 68b32a60ef
uint256: fix failing build (#8370) 2022-08-29 14:45:10 +00:00
Patrice.S 2c994627ea
spring-tx: Initial integration (#8357)
* Add spring-tx TransactionAttributeSourceEditor fuzz target with dict

* Add missing copyright headers on spring-framework fuzz targets
2022-08-29 10:22:31 -04:00
manunio b35f790d0d
go-toml: initial integration (#8368)
* go-toml: initial integration

* Added primary_contact

* Updated repo to use v2 branch

* Removed check against too large testcase
2022-08-29 10:19:32 -04:00
Nick Wellnhofer 1e8faea74e
[libxml2] [libxslt] Build requires newer automake (#8365) 2022-08-29 13:20:25 +01:00
Dirk Lemstra 26a5fd4916
Add libjxl to the build of ImageMagick and removed i386 architecture. (#8363)
* Add libjxl to the build of ImageMagick.

* Removed i386 architecture.

* Removed specific settings.
2022-08-29 13:20:05 +01:00
Joachim Metz daef7f74d8
Added libfvde to libyal project configuration (#8367) 2022-08-29 13:19:41 +01:00
Dirk Lemstra b9c62d69f8
Removed packages that we no longer need to install and enabled memory sanitizer (#8355)
* Removed packages that we no longer need to install.

* Enabled memory sanitizer.

* Also add Jon Sneyers to the CC list of ImageMagick.
2022-08-27 16:58:33 +01:00
Kazuyoshi Kato 822994dadb
[containerd] remove cncf-fuzzing (#8360)
The only fuzzer we have there is containerd_import_structured_fuzzer.go
but it is ignored by build.sh since
https://github.com/cncf/cncf-fuzzing/pull/220.

Signed-off-by: Kazuyoshi Kato <katokazu@amazon.com>

Signed-off-by: Kazuyoshi Kato <katokazu@amazon.com>
2022-08-27 15:45:37 +00:00
Tim Wojtulewicz f93b8506e8
zeek: Move corpus seed files to separate directory (#8361) 2022-08-27 16:19:06 +01:00
vargen 038609bc07
[plexus-utils] initial integration (#8356) 2022-08-26 11:13:15 -07:00
DavidKorczynski 3377581f8c
ghostscript: add two new vector device targets (#8358) 2022-08-26 12:28:32 +01:00
Aymeric Augustin f0e5d9be61
Submit the websockets project. (#8339) 2022-08-25 14:18:37 -04:00
CheeseHunter117 8ad06225c4
Expand spring-security fuzzing (#8354)
* Expand spring-security fuzzing

* remove comment from debugging that is now misleading the reader (#20)
2022-08-25 10:01:03 -04:00
Patrice.S 655774fc59
guice: Disable RCE hook (#8353)
Disable RCE hook
2022-08-25 12:03:45 +01:00
Henry Lin b9cc48e41e
Tomcat: Modify one fuzz target and disable bug detector (#8350)
Modify one fuzz target and disable expressionlanguage detector
2022-08-24 23:57:13 +01:00
AdamKorcz 75f19e2cac
golang: add fuzzer (#8351)
Signed-off-by: AdamKorcz <adam@adalogics.com>

Signed-off-by: AdamKorcz <adam@adalogics.com>
2022-08-24 23:56:42 +01:00
DavidKorczynski 4dd5afc54b
grpc-py: extend fuzzing suite (#8348)
- Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50586
- Ensures coverage can be run by enabling clean server exit in coverage
runs
- Extends to also reach grpc_status code
2022-08-24 16:20:42 +01:00
Dominik Röttsches c26c0b8d8d
[skia] Add myself to Skia CC list (#8342)
Planning to address COLRv1 typeface rendering fuzzing issues.
2022-08-24 10:31:50 -04:00
jonathanmetzman dabee12f18
Roll clang to llvmorg-15-init-1464-gbf7f8d6f (#8313)
* Roll clang to llvmorg-15-init-1464-gbf7f8d6f

This is incremental roll meant to break less than #8108

* Pin some projects

* pin cryptofuzz
2022-08-24 10:31:28 -04:00
Caolán McNamara e7567e2902
hunspell: enable msan and use project build script (#8346)
msan works fine, and using a project-side build script makes it more
flexible to extend hunspell's fuzzing
2022-08-24 12:02:42 +01:00
Aki Tuomi e1d0e57a08
dovecot: Update dependencies to make Dovecot build again (#8345) 2022-08-24 12:02:01 +01:00