From 1fa170b9d2c94d513b42d1749df7a9e94e659563 Mon Sep 17 00:00:00 2001 From: Daan De Meyer Date: Mon, 19 May 2025 17:43:48 +0200 Subject: [PATCH] oss-fuzz: Add comment on why we build with --auto-features=disabled --- tools/oss-fuzz.sh | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tools/oss-fuzz.sh b/tools/oss-fuzz.sh index 05f9191fb66..3cd5cec6703 100755 --- a/tools/oss-fuzz.sh +++ b/tools/oss-fuzz.sh @@ -32,6 +32,12 @@ meson_args=("-Db_lundef=false") if [ -z "$FUZZING_ENGINE" ]; then meson_args+=("-Dllvm-fuzz=true") else + # The situation with runtime dependencies on oss-fuzz is complicated as the execution environment differs + # from the build environment + # (https://google.github.io/oss-fuzz/further-reading/fuzzer-environment/#runtime-dependencies). Because + # statically linking isn't viable for us for various reasons, we do a build with most features disabled + # to link against as few libraries as possible. The libraries we do end up linking against happen (by + # chance) to be installed in the oss-fuzz execution environment. meson_args+=("-Doss-fuzz=true" "--auto-features=disabled" "-Dnspawn=enabled" "-Dresolve=true") apt-get update -- 2.47.3