mirror of https://github.com/google/oss-fuzz.git
370fb73473
Important functional changes involve mostly improvements to the command line scripts (this doesn't affect the build infra, only local use): 1. Make sure scripts use the same builder as builds requested by infra, otherwise builds will be very slow and will fail for larger projects. 2. Allow users to specify --test-images to use base images with suffix "-testing" 3. Allow script users to specify --parallel for parallel builds. 4. Allow script users to specify --testing so that builds are uploaded to testing buckets. 5. Allow script users to specify --branch so that builds use specified branch instead of master. 6. Clone oss-fuzz with depth 1 for improved speed and space usage. 7. Use logging instead of writing to stderr or print. 8. Allow scripts to accept multiple projects. 9. Allow script to keep executing after failure to get build steps. 10. Change scripts to use python3. 11. Tag more so builds are easier to query. 12. Log the gcb page for each build. Other changes include major refactoring: 1. Don't construct image names from scratch using format strings each time they are used. Provide a helper function for this. 2. Provide a helper function, get_env instead of constructing the env from scratch each time. 3. Move compile step into its own function: get_compile_step. 4. Move upload steps into their own helper function get_upload_steps. 5. Don't misuse the name image_project when we really mean cloud project. 6. Move cleanup step into its own helper function: get_cleanup_step. 7. Exit with returncode of main function from build_project. 8. Add unittests for build_project. 9. Make request_build share run_build code with build_project. 10. Use proper spacing in comments. 11. Test builds other than libfuzzer-ASAN-x86_64. Test other sanitizers, fuzzers and architectures 12. Make build_and_run_coverage share more code with build_project. 13. Move tests for build_and_run_coverage_test.py out of requst_coverage_test.py into their own file. 14. Use single quotes for strings. 15. Store state for a build in Build object instead of passing it everywhere. 16. Don't abuse project_yaml dict for storing project state. Use a Project object instead. 17. Better variable naming. 18. Use more classes instead of passing around arguments. 19. Use more f-strings. 20. Make scripts share main function. 21. Begin comments with uppercase and end with period. 22. Don't import functions or classes as dictated by style guide. 23. Share more test code in test_utils Related: #6180. |
||
|---|---|---|
| .. | ||
| base-images | ||
| build | ||
| ci | ||
| cifuzz | ||
| triage-party | ||
| uploader | ||
| .dockerignore | ||
| README.md | ||
| bisector.py | ||
| bisector_test.py | ||
| build_and_push_test_images.py | ||
| build_fuzzers.Dockerfile | ||
| build_specified_commit.py | ||
| build_specified_commit_test.py | ||
| constants.py | ||
| helper.py | ||
| helper_test.py | ||
| presubmit.py | ||
| pytest.ini | ||
| repo_manager.py | ||
| repo_manager_test.py | ||
| retry.py | ||
| run_fuzzers.Dockerfile | ||
| templates.py | ||
| test_repos.py | ||
| utils.py | ||
| utils_test.py | ||
README.md
infra
OSS-Fuzz project infrastructure
Core infrastructure:
base-images- docker images for building fuzz targets & corresponding jenkins pipeline.
Continuous Integration infrastructure:
libfuzzer-pipeline.groovy- jenkins pipeline that runs for each OSS-Fuzz project.docker-cleanup- jenkins pipeline to clean stale docker images & processes.push-images- jenkins pipeline to push built base images.jenkins-cluster- kubernetes cluster definition for our jenkins-based build (not operational yet, #10).
helper.py
script to automate common docker operations
| Command | Description |
|---|---|
generate |
Generates skeleton files for a new project |
build_image |
Builds a docker image for a given project |
build_fuzzers |
Builds fuzz targets for a given project |
run_fuzzer |
Runs a fuzz target in a docker container |
coverage |
Runs fuzz target(s) in a docker container and generates a code coverage report. See Code Coverage doc |
reproduce |
Runs a testcase to reproduce a crash |
shell |
Starts a shell inside the docker image for a project |