blob: eb08bd6ef3db07deacd4d9294c6ec5f61269c40c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
#!/bin/bash -eu
# Testcase 1. Valid fuzzer build.
################################################################################
./configure
make -j$(nproc) clean
make -j$(nproc) all
$CXX $CXXFLAGS -std=c++11 -I. \
$SRC/bad_example_fuzzer.cc -o $OUT/bad_example_valid_build \
$LIB_FUZZING_ENGINE ./libz.a
# Testcase 2. Silent startup crash.
################################################################################
./configure
make -j$(nproc) clean
make -j$(nproc) all
$CXX $CXXFLAGS -std=c++11 -I. -DINTENTIONAL_STARTUP_CRASH \
$SRC/bad_example_fuzzer.cc -o $OUT/bad_example_startup_crash \
$LIB_FUZZING_ENGINE ./libz.a
# The latest two examples won't for for coverage build, bail out.
if [[ $SANITIZER = *coverage* ]]; then
exit 0
fi
# Testcase 3. Partially ignore the flags provided by OSS-Fuzz.
################################################################################
export CFLAGS_ORIG="$CFLAGS"
export CFLAGS="-O1"
export CXXFLAGS_ORIG="$CXXFLAGS"
export CXXFLAGS="-O1 -stdlib=libc++"
./configure
make -j$(nproc) clean
make -j$(nproc) all
$CXX -fsanitize=$SANITIZER $CXXFLAGS_ORIG -std=c++11 -I. \
$SRC/bad_example_fuzzer.cc -o $OUT/bad_example_partial_instrumentation \
$LIB_FUZZING_ENGINE ./libz.a
# Testcase 4. Completely ignore the flags provided by OSS-Fuzz.
################################################################################
./configure
make -j$(nproc) clean
make -j$(nproc) all
$CXX -fsanitize=$SANITIZER $CXXFLAGS -std=c++11 -I. \
$SRC/bad_example_fuzzer.cc -o $OUT/bad_example_no_instrumentation \
$LIB_FUZZING_ENGINE ./libz.a
# Testcase 5. Enable multiple sanitizers.
################################################################################
# Add UBSan to ASan or MSan build. Add ASan to UBSan build.
EXTRA_SANITIZER="undefined"
if [[ $SANITIZER = *undefined* ]]; then
EXTRA_SANITIZER="address"
fi
export CFLAGS="$CFLAGS_ORIG -fsanitize=$EXTRA_SANITIZER"
export CXXFLAGS="$CXXFLAGS_ORIG -fsanitize=$EXTRA_SANITIZER"
./configure
make -j$(nproc) clean
make -j$(nproc) all
$CXX $CXXFLAGS -std=c++11 -I. \
$SRC/bad_example_fuzzer.cc -o $OUT/bad_example_mixed_sanitizers \
$LIB_FUZZING_ENGINE ./libz.a
|
