#!/bin/bash -eu # Copyright 2022 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # ################################################################################ find $SRC/spring* -name *.dict -o -name *zip -exec cp {} $OUT/ \; export JAVA_HOME="$OUT/open-jdk-17" mkdir -p $JAVA_HOME rsync -aL --exclude=*.zip "/usr/lib/jvm/java-17-openjdk-amd64/" "$JAVA_HOME" CURRENT_VERSION=$(./gradlew properties --console=plain | sed -nr "s/^version:\ (.*)/\1/p") ALL_JARS=""; function install_shadowJar { ./gradlew shadowJar --build-file spring-$1/spring-$1.gradle -x javadoc -x test install -v "spring-$1/build/libs/spring-$1-${CURRENT_VERSION}-all.jar" "$OUT/spring-$1.jar"; ALL_JARS="${ALL_JARS} spring-$1.jar"; } install_shadowJar context; install_shadowJar core; install_shadowJar jdbc; install_shadowJar orm; install_shadowJar web; install_shadowJar webmvc; install_shadowJar test; install_shadowJar tx; install_shadowJar messaging; # The classpath at build-time includes the project jars in $OUT as well as the # Jazzer API. BUILD_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "$OUT/%s:"):$JAZZER_API_PATH:$SRC # All .jar and .class files lie in the same directory as the fuzzer at runtime. RUNTIME_CLASSPATH=$(echo $ALL_JARS | xargs printf -- "\$this_dir/%s:"):\$this_dir function create_fuzz_targets() { mkdir -p $SRC/$1 mkdir -p $OUT/$1 javac -cp $BUILD_CLASSPATH $SRC/$1/*.java --release 17 for fuzzer in $SRC/$1/*Fuzzer.java; do fuzzer_basename=$(basename -s .java $fuzzer) # Create an execution wrapper that executes Jazzer with the correct arguments. echo "#!/bin/sh # LLVMFuzzerTestOneInput for fuzzer detection. this_dir=\$(dirname \"\$0\") JAVA_HOME=\"\$this_dir/open-jdk-17/\" \ LD_LIBRARY_PATH=\"\$this_dir/open-jdk-17/lib/server\":\$this_dir \ \$this_dir/jazzer_driver --agent_path=\$this_dir/jazzer_agent_deploy.jar \ --cp=$RUNTIME_CLASSPATH \ --target_class=$fuzzer_basename \ --instrumentation_excludes=org.aspectj.weaver.** \ --jvm_args=\"-Xmx2048m\" \ \$@" > $OUT/$fuzzer_basename chmod u+x $OUT/$fuzzer_basename done cp $SRC/$1/*.class $OUT/ } create_fuzz_targets spring-aop create_fuzz_targets spring-beans create_fuzz_targets spring-context create_fuzz_targets spring-expression create_fuzz_targets spring-tx create_fuzz_targets spring-web create_fuzz_targets spring-jdbc create_fuzz_targets spring-messaging cp $SRC/spring-jdbc/*.xml $OUT/spring-jdbc/