aboutsummaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
* [cairo] Add vendor_ccs (#5347)Gravatar Tyson Smith2021-03-09
|
* Rust coverage : source remap after changing dir (#5345)Gravatar Catena cyber2021-03-09
|
* Allow security team of Gitea to access the issues (#5338)Gravatar Lunny Xiao2021-03-09
| | | And once the security team members changed, we have to send new PR to change this.
* [base-builder] Delete unneeded files from atheris install (#5344)Gravatar jonathanmetzman2021-03-09
|
* [infra] Remove minijail. (#5343)Gravatar jonathanmetzman2021-03-09
| | | | We don't need minijail tooling anymore since we aren't using it on OSS-Fuzz.
* [base-runner] Reduce size by ~200 MB by using apt better (#5339)Gravatar jonathanmetzman2021-03-09
| | | | Don't install recommended packages if it means installing an entire gcc toolchain. We don't need it in the runner.
* [CIFuzz][cifuzz-base] Slim down cifuzz-base (#5288)Gravatar jonathanmetzman2021-03-09
| | | | | | Reduce cifuzz-base size from 846MB to 444MB. 1. Don't install parts of docker that aren't necessary. 2. Use .dockerignore properly.
* libfido2: update dependencies (#5340)Gravatar Ludvig Michaelsson2021-03-09
| | | | | * libfido2: update libcbor to v0.8.0 * libfido2: add new zlib dependency
* [gpac] initial integration (#5289)Gravatar DavidKorczynski2021-03-09
|
* [go-sftp] Add go-sftp project (#5324)Gravatar Catena cyber2021-03-09
|
* [ygot] Add ygot project (#5245)Gravatar Catena cyber2021-03-09
|
* Golang coverage ok with package in $SRC (#5325)Gravatar Catena cyber2021-03-09
|
* [rnp] Update build script to reflect library naming change. (#5327)Gravatar Nickolay Olshevsky2021-03-09
|
* fix afl++ asan options (#5336)Gravatar van Hauser2021-03-09
|
* [gitea] Use a special email address to manage security (#5334)Gravatar Lunny Xiao2021-03-09
|
* [clamav] Disable honggfuzz (#5322)Gravatar Micah Snyder2021-03-09
| | | | The honggfuzz fuzz targets are failing the build checks for reasons unknown. Disabling for now because I don't know how to debug it.
* Golang coverage with go 1.16 and modules (#5321)Gravatar Catena cyber2021-03-08
| | | | | | | | * Fixes go coverage with modules * Golang coverage html report turning off modules Otherwise, we get the error working directory is not part of a module
* libvips: ensure linker is aware of selinux/resolv deps (#5318)Gravatar Lovell Fuller2021-03-08
|
* [base-runner] Fix go issue and remove uneeded rust stuff. (#5319)Gravatar jonathanmetzman2021-03-08
| | | | | Go needs the toolchain for now, so add it back to base-runner. We don't actually need the rust toolchain so get rid of it (saving about 1GB).
* Rust coverage report (for Suricata) (#4697)Gravatar Catena cyber2021-03-08
| | | | | * Rust coverage test * Workaround to get rust coverage for Suricata
* [cryptofuzz] Fix build (#5310)Gravatar Guido Vranken2021-03-07
| | | | | * [cryptofuzz] Fix build * [cryptofuzz] Trigger CI
* proj4/Dockerfile: install wget (#5313)Gravatar Even Rouault2021-03-07
| | | | | | | | | | Builds are currently broken since running libtiff ./autogen.sh requires wget ``` autoconf echo ./autogen.sh: getting config.guess... ./autogen.sh: getting config.guess... wget -q --timeout=5 -O config/config.guess.tmp https://git.savannah.gnu.org/cgit/config.git/plain/config.guess ```
* [wolfssl] Import Wycheproof test vectors into corpus (#5314)Gravatar Guido Vranken2021-03-07
|
* dropbear: move corpus out of the source checkout (#5315)Gravatar Matt Johnston2021-03-07
| | | This should fix cifuzz which replaces the checkout
* dropbear: Use github so cifuzz might work (#5312)Gravatar Matt Johnston2021-03-06
|
* add asan poison check to afl++ cmplog (#5311)Gravatar van Hauser2021-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * output afl++ setup * update commit id * update afl++ commit id * asan + cmplog fix * update commit id * update and enhance afl++ * update afl++ commit id, better run asan options * fix linter * add debug_afl script * Update debug_afl * Update compile_afl * fix for karchive * put debug_afl in the docker container * asan poison fix Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
* [freeimage] Use the SVN repo instead of the latest source archive. (#3414)Gravatar Max Moroz2021-03-05
| | | | | | | | | | | | | | | * [freeimage] Use the SVN repo instead of the latest source archive. Requested in https://github.com/google/oss-fuzz/pull/2606#issuecomment-588533038 * fix the path * fix path again * more fixes * should work now! * test locally
* [clamav] Switch from autotools to cmake (#5302)Gravatar Micah Snyder2021-03-05
| | | | | | | For the CMake build, build all dependencies as static libraries first. To automate this, the Dockerfile uses the Mussels tool. The HAVE_MMAP variable is explicitly disabled so that malloc is used in place of mmap, which will yield better fuzzing results.
* Fix TensorFlow coverage build. (#5309)Gravatar Mihai Maruseac2021-03-05
| | | | | | | | | | | | It seems that due to some recent change in `BUILD` rules, `bazel` creates a copy of the code tree under `bazel-tensorflow/external/org_tensorflow` symlink. However, the tree contains a `bazel-tensorflow` symlink so we get to an infinite symlink expansion issue. This breaks coverage build. The fix is simple: before copying `bazel-tensorflow/external` to `${OUT}` in coverage builds, remove `org_tensorflow` symlink. This is not an issue for the coverage build since we copy the entire source tree to the coverage directory in a previous step.
* [runc] Initial integration (#5287)Gravatar AdamKorcz2021-03-05
| | | | | | | | | | | | | | | | | | | | | | | * [teleport] Initial integration * Minor update to run tests again * Remove debugging things * Removed an unfinished file * Small nit * Added maintainers * Update Dockerfile * Update build.sh * Update project.yaml * Updated licenses Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
* jsonschema: initial integration. (#4996)Gravatar DavidKorczynski2021-03-05
|
* [infra] Avoid adding fuzzing language for shell subcommand. (#5300) (#5301)Gravatar Sebastian Rasmussen2021-03-05
|
* Add docs for Java/JVM fuzzing (#5298)Gravatar Fabian Meumertzheim2021-03-05
| | | Related: https://github.com/google/oss-fuzz/issues/5178
* fix karchive build for afl++ (#5305)Gravatar van Hauser2021-03-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * output afl++ setup * update commit id * update afl++ commit id * asan + cmplog fix * update commit id * update and enhance afl++ * update afl++ commit id, better run asan options * fix linter * add debug_afl script * Update debug_afl * Update compile_afl * fix for karchive * put debug_afl in the docker container Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>
* add an extra maintainer (#5307)Gravatar Caolán McNamara2021-03-05
| | | | | * add an extra maintainer * add main_repo line
* [jbig2dec] Custom allocator now supports test case being run more than once. ↵Gravatar Sebastian Rasmussen2021-03-04
| | | | | | | | | | | | | | | (#5304) To make that possible these things were also done: * Rename variables for clarity. * Rename functions to separate them from jbig2dec's own allocator API. * Consistently use size_t for all memory statistics. * Add helper function for checking peak memory use. * Add helper function for when limit is reached. * Add helper function for when allocations fail. * Add helper function for memory statis at end of run (including leak check). This will help with fixing jbig2dec issue 21675 reported by OSS-fuzz.
* [base-runner] Reduce image size by 45% (645 MB). (#5283)Gravatar jonathanmetzman2021-03-04
| | | | | | Reduce image size by: 1. Not installing go toolchain in final image. Build go tools in seperate image that doesn't become base-runner. 2. Download the JVM zip in the same step we remove it.
* update afl++ commit id plus add afl++ debug script (#5297)Gravatar van Hauser2021-03-04
|
* libyang: bug report access to more collaborators (#5296)Gravatar Michal Vasko2021-03-04
|
* [NFC] Remove extra space in project.yamlGravatar jonathanmetzman2021-03-04
|
* [openssh] enable recently-added ssh-agent fuzzer (#5294)Gravatar Damien Miller2021-03-03
| | | Co-authored-by: Damien Miller <djm@google.com>
* [AFL++][base-builder] Precompile afl++ (#5290)Gravatar jonathanmetzman2021-03-03
| | | | | Precompile AFL like we already do for honggfuzz. This saves about a minute in compilation time of AFL targets by doing it in base-builder It only adds about 30 MB to the image size.
* poppler: Fix build (#5285)Gravatar tsdgeos2021-03-04
|
* grok: change location of test data, to make CIFuzz happy (#5292)Gravatar Aaron Boxer2021-03-03
|
* [base-clang] Reduce build time by ~65% (#5280)Gravatar jonathanmetzman2021-03-03
| | | | | | | | | | | | | | | | Reduce build time by doing the following: 1. Building the second stage clang build with a clang binary we download from chromium. 2. Changing NPROC to be half of the cores instead of assuming it's 16 cores. This still addresses the OOM when building on GCB but speeds up local building. 3. Don't install recommended packages and use --depth 1 when possible (very minor improvements compared to the above). In all this reduces local build time of base-clang from 32 minutes to 11 minutes. Because build times are reduced, it will be easier to iteratively develop changes needed for #5170
* [vitess] Move build script upstream (#5286)Gravatar AdamKorcz2021-03-03
|
* [CIFuzz][coverage] Fix bug in getting coverage reports (#5284)Gravatar jonathanmetzman2021-03-03
| | | Also add tests.
* ujson: ensure hypothesis fuzzer is copied in (#5277)Gravatar DavidKorczynski2021-03-03
| | | The current hypothesis example is not actually copied into the container. This PR fixes it so the fuzzer builds.
* [TSAN] Support TSAN (#5266)Gravatar jonathanmetzman2021-03-02
| | | | We aren't planning on suppoting TSAN on ClusterFuzz. But we can support in CIFuzz since Skia wants it.
* [vitess] Add email contact (#5274)Gravatar AdamKorcz2021-03-02
| | | | | * [teleport] Initial integration * Minor update to run tests again