From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Mon, 19 May 2025 15:43:48 +0000 (+0200)
Subject: oss-fuzz: Add comment on why we build with --auto-features=disabled
X-Git-Tag: v258-rc1~569^2~4
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1fa170b9d2c94d513b42d1749df7a9e94e659563;p=thirdparty%2Fsystemd.git

oss-fuzz: Add comment on why we build with --auto-features=disabled
---

diff --git a/tools/oss-fuzz.sh b/tools/oss-fuzz.sh
index 05f9191fb66..3cd5cec6703 100755
--- a/tools/oss-fuzz.sh
+++ b/tools/oss-fuzz.sh
@@ -32,6 +32,12 @@ meson_args=("-Db_lundef=false")
 if [ -z "$FUZZING_ENGINE" ]; then
     meson_args+=("-Dllvm-fuzz=true")
 else
+    # The situation with runtime dependencies on oss-fuzz is complicated as the execution environment differs
+    # from the build environment
+    # (https://google.github.io/oss-fuzz/further-reading/fuzzer-environment/#runtime-dependencies). Because
+    # statically linking isn't viable for us for various reasons, we do a build with most features disabled
+    # to link against as few libraries as possible. The libraries we do end up linking against happen (by
+    # chance) to be installed in the oss-fuzz execution environment.
     meson_args+=("-Doss-fuzz=true" "--auto-features=disabled" "-Dnspawn=enabled" "-Dresolve=true")
 
     apt-get update