mirror of https://github.com/google/oss-fuzz.git
113 lines
5.1 KiB
Bash
Executable File
113 lines
5.1 KiB
Bash
Executable File
#!/bin/bash -eu
|
|
# Copyright 2021 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
################################################################################
|
|
|
|
export CXXFLAGS="$CXXFLAGS -DCRYPTOFUZZ_NO_OPENSSL"
|
|
export LIBFUZZER_LINK="$LIB_FUZZING_ENGINE"
|
|
|
|
# Install Boost headers
|
|
cd $SRC/
|
|
tar jxf boost_1_74_0.tar.bz2
|
|
cd boost_1_74_0/
|
|
CFLAGS="" CXXFLAGS="" ./bootstrap.sh
|
|
CFLAGS="" CXXFLAGS="" ./b2 headers
|
|
cp -R boost/ /usr/include/
|
|
|
|
# Build libecc
|
|
cd $SRC/libecc
|
|
export CFLAGS="$CFLAGS -DUSE_CRYPTOFUZZ"
|
|
make -j$(nproc) build/libsign.a
|
|
export LIBECC_PATH=$(realpath .)
|
|
export CXXFLAGS="$CXXFLAGS -DCRYPTOFUZZ_LIBECC"
|
|
|
|
# Build Botan
|
|
cd $SRC/botan
|
|
if [[ $CFLAGS != *-m32* ]]
|
|
then
|
|
./configure.py --cc-bin=$CXX --cc-abi-flags="$CXXFLAGS" --disable-shared --disable-modules=locking_allocator,x509,tls --build-targets=static --without-documentation
|
|
else
|
|
./configure.py --cpu=x86_32 --cc-bin=$CXX --cc-abi-flags="$CXXFLAGS" --disable-shared --disable-modules=locking_allocator,x509,tls --build-targets=static --without-documentation
|
|
fi
|
|
make -j$(nproc)
|
|
|
|
export CXXFLAGS="$CXXFLAGS -DCRYPTOFUZZ_BOTAN -DCRYPTOFUZZ_BOTAN_IS_ORACLE"
|
|
export LIBBOTAN_A_PATH="$SRC/botan/libbotan-3.a"
|
|
export BOTAN_INCLUDE_PATH="$SRC/botan/build/include"
|
|
|
|
# Compile libgmp
|
|
cd $SRC/
|
|
tar --lzip -xvf gmp-6.2.1.tar.lz
|
|
cd $SRC/gmp-6.2.1/
|
|
autoreconf -ivf
|
|
if [[ $CFLAGS = *-m32* ]]
|
|
then
|
|
setarch i386 ./configure --enable-maintainer-mode --enable-assert
|
|
elif [[ $CFLAGS = *sanitize=memory* ]]
|
|
then
|
|
./configure --enable-maintainer-mode --enable-assert --disable-assembly
|
|
else
|
|
./configure --enable-maintainer-mode --enable-assert
|
|
fi
|
|
make -j$(nproc)
|
|
export CXXFLAGS="$CXXFLAGS -DCRYPTOFUZZ_LIBGMP"
|
|
export LIBGMP_INCLUDE_PATH=$(realpath .)
|
|
export LIBGMP_A_PATH=$(realpath .libs/libgmp.a)
|
|
|
|
# Compile wolfSSL
|
|
cd $SRC/wolfssl/
|
|
# Checkout at commit that's known to be bug-free
|
|
git checkout 4b0c8c07f42abc545761c2c775c6cf22599e9b05
|
|
# Fix Curve448 bug (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52254)
|
|
git merge 4d9aacbe879a96f0a26b4c146906b5b9bca473f7
|
|
# Note (to self):
|
|
# Compiling wolfCrypt with SP math instead of normal math due to symbol collisions (specifically fp_* functions) between libecc and wolfCrypt otherwise.
|
|
export CFLAGS="$CFLAGS -DHAVE_AES_ECB -DWOLFSSL_DES_ECB -DHAVE_ECC_SECPR2 -DHAVE_ECC_SECPR3 -DHAVE_ECC_BRAINPOOL -DHAVE_ECC_KOBLITZ -DWOLFSSL_ECDSA_SET_K -DWOLFSSL_ECDSA_SET_K_ONE_LOOP -DWOLFSSL_SP_INT_NEGATIVE"
|
|
autoreconf -ivf
|
|
export WOLFCRYPT_CONFIGURE_PARAMS="--enable-static --enable-md2 --enable-md4 --enable-ripemd --enable-blake2 --enable-blake2s --enable-pwdbased --enable-scrypt --enable-hkdf --enable-cmac --enable-arc4 --enable-camellia --enable-aesccm --enable-aesctr --enable-xts --enable-des3 --enable-x963kdf --enable-harden --enable-aescfb --enable-aesofb --enable-aeskeywrap --enable-aessiv --enable-keygen --enable-curve25519 --enable-curve448 --enable-shake256 --disable-crypttests --disable-examples --enable-compkey --enable-ed448 --enable-ed25519 --enable-ecccustcurves --enable-xchacha --enable-cryptocb --enable-eccencrypt --enable-smallstack --enable-ed25519-stream --enable-ed448-stream --enable-sp-math-all --enable-aesgcm-stream --enable-shake128 --enable-siphash"
|
|
if [[ $CFLAGS = *sanitize=memory* ]]
|
|
then
|
|
export WOLFCRYPT_CONFIGURE_PARAMS="$WOLFCRYPT_CONFIGURE_PARAMS -disable-asm"
|
|
fi
|
|
./configure $WOLFCRYPT_CONFIGURE_PARAMS
|
|
make -j$(nproc)
|
|
export CXXFLAGS="$CXXFLAGS -DCRYPTOFUZZ_WOLFCRYPT"
|
|
export WOLFCRYPT_LIBWOLFSSL_A_PATH=`realpath src/.libs/libwolfssl.a`
|
|
export WOLFCRYPT_INCLUDE_PATH=`realpath .`
|
|
|
|
# Build Cryptofuzz
|
|
cd $SRC/cryptofuzz
|
|
python gen_repository.py
|
|
rm extra_options.h
|
|
echo -n '"' >>extra_options.h
|
|
echo -n '--force-module=libecc ' >>extra_options.h
|
|
echo -n '--operations=Digest,HMAC,ECC_PrivateToPublic,ECDSA_Sign,ECDSA_Verify,ECGDSA_Sign,ECGDSA_Verify,ECRDSA_Sign,ECRDSA_Verify,ECDH_Derive,ECC_Point_Add,ECC_Point_Mul,ECC_Point_Dbl,ECC_Point_Neg,BignumCalc ' >>extra_options.h
|
|
echo -n '--curves=brainpool224r1,brainpool256r1,brainpool384r1,brainpool512r1,secp192r1,secp224r1,secp256r1,secp384r1,secp521r1,secp256k1,ed25519,ed448,x25519,x448 ' >>extra_options.h
|
|
echo -n '--digests=NULL,SHA224,SHA256,SHA3-224,SHA3-256,SHA3-384,SHA3-512,SHA384,SHA512,SHA512-224,SHA512-256,SM3,SHAKE256_114,STREEBOG-256,STREEBOG-512,RIPEMD160 ' >>extra_options.h
|
|
echo -n '--calcops=Add,AddMod,And,Bit,GCD,ExtGCD_X,ExtGCD_Y,InvMod,IsOdd,IsOne,IsZero,LShift1,Mod,Mul,MulMod,NumBits,Or,RShift,Sqr,Sub,SubMod,Xor,LRot,RRot ' >>extra_options.h
|
|
echo -n '"' >>extra_options.h
|
|
cd modules/libecc/
|
|
make -B -j$(nproc)
|
|
cd ../botan/
|
|
make -B -j$(nproc)
|
|
cd ../libgmp/
|
|
make -B -j$(nproc)
|
|
cd ../wolfcrypt/
|
|
make -B -j$(nproc)
|
|
cd ../../
|
|
make -B -j$(nproc)
|
|
|
|
cp cryptofuzz $OUT/cryptofuzz-libecc
|