aboutsummaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
* fix afl++ asan options (#5336)Gravatar van Hauser2021-03-09
|
* [gitea] Use a special email address to manage security (#5334)Gravatar Lunny Xiao2021-03-09
|
* [clamav] Disable honggfuzz (#5322)Gravatar Micah Snyder2021-03-09
| | | | The honggfuzz fuzz targets are failing the build checks for reasons unknown. Disabling for now because I don't know how to debug it.
* Golang coverage with go 1.16 and modules (#5321)Gravatar Catena cyber2021-03-08
| | | | | | | | * Fixes go coverage with modules * Golang coverage html report turning off modules Otherwise, we get the error working directory is not part of a module
* libvips: ensure linker is aware of selinux/resolv deps (#5318)Gravatar Lovell Fuller2021-03-08
|
* [base-runner] Fix go issue and remove uneeded rust stuff. (#5319)Gravatar jonathanmetzman2021-03-08
| | | | | Go needs the toolchain for now, so add it back to base-runner. We don't actually need the rust toolchain so get rid of it (saving about 1GB).
* Rust coverage report (for Suricata) (#4697)Gravatar Catena cyber2021-03-08
| | | | | * Rust coverage test * Workaround to get rust coverage for Suricata
* [cryptofuzz] Fix build (#5310)Gravatar Guido Vranken2021-03-07
| | | | | * [cryptofuzz] Fix build * [cryptofuzz] Trigger CI
* proj4/Dockerfile: install wget (#5313)Gravatar Even Rouault2021-03-07
| | | | | | | | | | Builds are currently broken since running libtiff ./autogen.sh requires wget ``` autoconf echo ./autogen.sh: getting config.guess... ./autogen.sh: getting config.guess... wget -q --timeout=5 -O config/config.guess.tmp https://git.savannah.gnu.org/cgit/config.git/plain/config.guess ```
* [wolfssl] Import Wycheproof test vectors into corpus (#5314)Gravatar Guido Vranken2021-03-07
|
* dropbear: move corpus out of the source checkout (#5315)Gravatar Matt Johnston2021-03-07
| | | This should fix cifuzz which replaces the checkout
* dropbear: Use github so cifuzz might work (#5312)Gravatar Matt Johnston2021-03-06
|
* add asan poison check to afl++ cmplog (#5311)Gravatar van Hauser2021-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * output afl++ setup * update commit id * update afl++ commit id * asan + cmplog fix * update commit id * update and enhance afl++ * update afl++ commit id, better run asan options * fix linter * add debug_afl script * Update debug_afl * Update compile_afl * fix for karchive * put debug_afl in the docker container * asan poison fix Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
* [freeimage] Use the SVN repo instead of the latest source archive. (#3414)Gravatar Max Moroz2021-03-05
| | | | | | | | | | | | | | | * [freeimage] Use the SVN repo instead of the latest source archive. Requested in https://github.com/google/oss-fuzz/pull/2606#issuecomment-588533038 * fix the path * fix path again * more fixes * should work now! * test locally
* [clamav] Switch from autotools to cmake (#5302)Gravatar Micah Snyder2021-03-05
| | | | | | | For the CMake build, build all dependencies as static libraries first. To automate this, the Dockerfile uses the Mussels tool. The HAVE_MMAP variable is explicitly disabled so that malloc is used in place of mmap, which will yield better fuzzing results.
* Fix TensorFlow coverage build. (#5309)Gravatar Mihai Maruseac2021-03-05
| | | | | | | | | | | | It seems that due to some recent change in `BUILD` rules, `bazel` creates a copy of the code tree under `bazel-tensorflow/external/org_tensorflow` symlink. However, the tree contains a `bazel-tensorflow` symlink so we get to an infinite symlink expansion issue. This breaks coverage build. The fix is simple: before copying `bazel-tensorflow/external` to `${OUT}` in coverage builds, remove `org_tensorflow` symlink. This is not an issue for the coverage build since we copy the entire source tree to the coverage directory in a previous step.
* [runc] Initial integration (#5287)Gravatar AdamKorcz2021-03-05
| | | | | | | | | | | | | | | | | | | | | | | * [teleport] Initial integration * Minor update to run tests again * Remove debugging things * Removed an unfinished file * Small nit * Added maintainers * Update Dockerfile * Update build.sh * Update project.yaml * Updated licenses Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
* jsonschema: initial integration. (#4996)Gravatar DavidKorczynski2021-03-05
|
* [infra] Avoid adding fuzzing language for shell subcommand. (#5300) (#5301)Gravatar Sebastian Rasmussen2021-03-05
|
* Add docs for Java/JVM fuzzing (#5298)Gravatar Fabian Meumertzheim2021-03-05
| | | Related: https://github.com/google/oss-fuzz/issues/5178
* fix karchive build for afl++ (#5305)Gravatar van Hauser2021-03-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * output afl++ setup * update commit id * update afl++ commit id * asan + cmplog fix * update commit id * update and enhance afl++ * update afl++ commit id, better run asan options * fix linter * add debug_afl script * Update debug_afl * Update compile_afl * fix for karchive * put debug_afl in the docker container Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
* add an extra maintainer (#5307)Gravatar Caolán McNamara2021-03-05
| | | | | * add an extra maintainer * add main_repo line
* [jbig2dec] Custom allocator now supports test case being run more than once. ↵Gravatar Sebastian Rasmussen2021-03-04
| | | | | | | | | | | | | | | (#5304) To make that possible these things were also done: * Rename variables for clarity. * Rename functions to separate them from jbig2dec's own allocator API. * Consistently use size_t for all memory statistics. * Add helper function for checking peak memory use. * Add helper function for when limit is reached. * Add helper function for when allocations fail. * Add helper function for memory statis at end of run (including leak check). This will help with fixing jbig2dec issue 21675 reported by OSS-fuzz.
* [base-runner] Reduce image size by 45% (645 MB). (#5283)Gravatar jonathanmetzman2021-03-04
| | | | | | Reduce image size by: 1. Not installing go toolchain in final image. Build go tools in seperate image that doesn't become base-runner. 2. Download the JVM zip in the same step we remove it.
* update afl++ commit id plus add afl++ debug script (#5297)Gravatar van Hauser2021-03-04
|
* libyang: bug report access to more collaborators (#5296)Gravatar Michal Vasko2021-03-04
|
* [NFC] Remove extra space in project.yamlGravatar jonathanmetzman2021-03-04
|
* [openssh] enable recently-added ssh-agent fuzzer (#5294)Gravatar Damien Miller2021-03-03
| | | Co-authored-by: Damien Miller <djm@google.com>
* [AFL++][base-builder] Precompile afl++ (#5290)Gravatar jonathanmetzman2021-03-03
| | | | | Precompile AFL like we already do for honggfuzz. This saves about a minute in compilation time of AFL targets by doing it in base-builder It only adds about 30 MB to the image size.
* poppler: Fix build (#5285)Gravatar tsdgeos2021-03-04
|
* grok: change location of test data, to make CIFuzz happy (#5292)Gravatar Aaron Boxer2021-03-03
|
* [base-clang] Reduce build time by ~65% (#5280)Gravatar jonathanmetzman2021-03-03
| | | | | | | | | | | | | | | | Reduce build time by doing the following: 1. Building the second stage clang build with a clang binary we download from chromium. 2. Changing NPROC to be half of the cores instead of assuming it's 16 cores. This still addresses the OOM when building on GCB but speeds up local building. 3. Don't install recommended packages and use --depth 1 when possible (very minor improvements compared to the above). In all this reduces local build time of base-clang from 32 minutes to 11 minutes. Because build times are reduced, it will be easier to iteratively develop changes needed for #5170
* [vitess] Move build script upstream (#5286)Gravatar AdamKorcz2021-03-03
|
* [CIFuzz][coverage] Fix bug in getting coverage reports (#5284)Gravatar jonathanmetzman2021-03-03
| | | Also add tests.
* ujson: ensure hypothesis fuzzer is copied in (#5277)Gravatar DavidKorczynski2021-03-03
| | | The current hypothesis example is not actually copied into the container. This PR fixes it so the fuzzer builds.
* [TSAN] Support TSAN (#5266)Gravatar jonathanmetzman2021-03-02
| | | | We aren't planning on suppoting TSAN on ClusterFuzz. But we can support in CIFuzz since Skia wants it.
* [vitess] Add email contact (#5274)Gravatar AdamKorcz2021-03-02
| | | | | * [teleport] Initial integration * Minor update to run tests again
* update afl++ commit id (#5273)Gravatar van Hauser2021-03-02
| | | | | | | | | | | * output afl++ setup * update commit id * update afl++ commit id * asan + cmplog fix * update commit id
* [skia] Add api_ddl_threading fuzzing (#5257)Gravatar wjtracey2021-03-02
|
* afl++ commit id update (#5271)Gravatar van Hauser2021-03-01
| | | | | | | | | * output afl++ setup * update commit id * update afl++ commit id * asan + cmplog fix
* add arquebus (#5270)Gravatar asraa2021-03-01
| | | Signed-off-by: Asra Ali <asraa@google.com>
* [qt] Use default fuzzing engines again (#5269)Gravatar Robert Löhning2021-03-01
| | | i.e. bring back afl.
* Fixes radon build (#5267)Gravatar Catena cyber2021-03-01
| | | | | | | * Fixes radon build * Fixes lotus build for all fuzz targets * Fixes lotus
* libredwg: no unstable versions (#5259)Gravatar Reini Urban2021-02-28
| | | don't test unstable non-release preR13 paths.
* [cryptofuzz] Update e-mail list (#5263)Gravatar Guido Vranken2021-02-27
|
* libyang: give access to the bug reports (#5260)Gravatar Michal Vasko2021-02-26
| | | Add a gmail account to get access to the detailed reports.
* [jazzer][java-example] Fix native library loading. (#5262)Gravatar jonathanmetzman2021-02-26
| | | | | | | | | | | | | Prior to this change, native library loading failed for two reasons: 1. Loading from current working directory instead of the fuzzer's directory. 2. Using ASAN_OPTIONS=handle_segv=2. Fix these issues by doing the following. 1. Adding the fuzzer's directory to LD_LIBRARY_PATH instead of "." 2. Specifying handle_segv=1 in ASAN_OPTIONS. Related: https://github.com/google/oss-fuzz/issues/5178
* Add HEIF format to kimageformats project (#5261)Gravatar Daniel Novomeský2021-02-26
|
* afl++ commit id update (#5258)Gravatar van Hauser2021-02-26
| | | | | | | * output afl++ setup * update commit id * update afl++ commit id
* libyang: initial integration (#5227)Gravatar DavidKorczynski2021-02-26
| | | | | | | | | * initial integration. * Updated the libyang project to reflect upstream set up. * Remove fuzzer that has false positives. * Updated project.yaml.