[thirdparty/systemd.git] / scripts / oss-fuzz.sh

#!/bin/bash
# SPDX-License-Identifier: LGPL-2.1+
#
# Copyright 2017 Jonathan Rudenberg
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
#
# systemd is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with systemd; If not, see <http://www.gnu.org/licenses/>.

set -ex

export LC_CTYPE=C.UTF-8

SANITIZER=${SANITIZER:-address -fsanitize-address-use-after-scope}
flags="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=$SANITIZER -fsanitize-coverage=trace-pc-guard,trace-cmp"

export CFLAGS=${CFLAGS:-$flags}
export CXXFLAGS=${CXXFLAGS:-$flags}
export CC=${CC:-clang}
export CXX=${CXX:-clang++}
export WORK=${WORK:-$(pwd)}
export OUT=${OUT:-$(pwd)/out}
mkdir -p $OUT

build=$WORK/build
rm -rf $build
mkdir -p $build

fuzzflag="oss-fuzz=true"
if [ -z "$FUZZING_ENGINE" ]; then
        fuzzflag="llvm-fuzz=true"
fi

meson $build -D$fuzzflag -Db_lundef=false
ninja -C $build fuzzers

for d in "$(dirname "$0")/../test/fuzz-corpus/"*; do
        zip -jqr $OUT/fuzz-$(basename "$d")_seed_corpus.zip "$d"
done

# get fuzz-dns-packet corpus
df=$build/dns-fuzzing
git clone --depth 1 https://github.com/CZ-NIC/dns-fuzzing $df
zip -jqr $OUT/fuzz-dns-packet_seed_corpus.zip $df/packet

mkdir -p $OUT/src/shared
mv $build/src/shared/libsystemd-shared-*.so $OUT/src/shared

find $build -maxdepth 1 -type f -executable -name "fuzz-*" -exec mv {} $OUT \;
cp src/fuzz/*.options $OUT
Commit	Line	Data
7db7d5b7 JR	1	#!/bin/bash
	2	# SPDX-License-Identifier: LGPL-2.1+
	3	#
	4	# Copyright 2017 Jonathan Rudenberg
	5	#
	6	# systemd is free software; you can redistribute it and/or modify it
	7	# under the terms of the GNU Lesser General Public License as published by
	8	# the Free Software Foundation; either version 2.1 of the License, or
	9	# (at your option) any later version.
	10	#
	11	# systemd is distributed in the hope that it will be useful, but
	12	# WITHOUT ANY WARRANTY; without even the implied warranty of
	13	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	14	# Lesser General Public License for more details.
	15	#
	16	# You should have received a copy of the GNU Lesser General Public License
	17	# along with systemd; If not, see <http://www.gnu.org/licenses/>.
	18
	19	set -ex
	20
	21	export LC_CTYPE=C.UTF-8
	22
31e57a35 JR	23	SANITIZER=${SANITIZER:-address -fsanitize-address-use-after-scope}
	24	flags="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=$SANITIZER -fsanitize-coverage=trace-pc-guard,trace-cmp"
	25
	26	export CFLAGS=${CFLAGS:-$flags}
	27	export CXXFLAGS=${CXXFLAGS:-$flags}
	28	export CC=${CC:-clang}
	29	export CXX=${CXX:-clang++}
	30	export WORK=${WORK:-$(pwd)}
	31	export OUT=${OUT:-$(pwd)/out}
	32	mkdir -p $OUT
	33
7d941c06 JR	34	build=$WORK/build
	35	rm -rf $build
	36	mkdir -p $build
	37
31e57a35 JR	38	fuzzflag="oss-fuzz=true"
	39	if [ -z "$FUZZING_ENGINE" ]; then
	40	fuzzflag="llvm-fuzz=true"
	41	fi
	42
	43	meson $build -D$fuzzflag -Db_lundef=false
7d941c06	44	ninja -C $build fuzzers
7db7d5b7	45
2bd37c5b JR	46	for d in "$(dirname "$0")/../test/fuzz-corpus/"*; do
	47	zip -jqr $OUT/fuzz-$(basename "$d")_seed_corpus.zip "$d"
	48	done
	49
	50	# get fuzz-dns-packet corpus
7d941c06	51	df=$build/dns-fuzzing
7db7d5b7 JR	52	git clone --depth 1 https://github.com/CZ-NIC/dns-fuzzing $df
	53	zip -jqr $OUT/fuzz-dns-packet_seed_corpus.zip $df/packet
	54
	55	mkdir -p $OUT/src/shared
7d941c06	56	mv $build/src/shared/libsystemd-shared-*.so $OUT/src/shared
7db7d5b7	57
7d941c06	58	find $build -maxdepth 1 -type f -executable -name "fuzz-*" -exec mv {} $OUT \;
31e57a35	59	cp src/fuzz/*.options $OUT