scripts/oss-fuzz.sh

   1 #!/bin/bash
   2 # SPDX-License-Identifier: LGPL-2.1+
   3 #
   4 # Copyright 2017 Jonathan Rudenberg
   5 #
   6 # systemd is free software; you can redistribute it and/or modify it
   7 # under the terms of the GNU Lesser General Public License as published by
   8 # the Free Software Foundation; either version 2.1 of the License, or
   9 # (at your option) any later version.
  10 #
  11 # systemd is distributed in the hope that it will be useful, but
  12 # WITHOUT ANY WARRANTY; without even the implied warranty of
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  14 # Lesser General Public License for more details.
  15 #
  16 # You should have received a copy of the GNU Lesser General Public License
  17 # along with systemd; If not, see <http://www.gnu.org/licenses/>.
  18
  19 set -ex
  20
  21 export LC_CTYPE=C.UTF-8
  22
  23 SANITIZER=${SANITIZER:-address -fsanitize-address-use-after-scope}
  24 flags="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=$SANITIZER -fsanitize-coverage=trace-pc-guard,trace-cmp"
  25
  26 export CFLAGS=${CFLAGS:-$flags}
  27 export CXXFLAGS=${CXXFLAGS:-$flags}
  28 export CC=${CC:-clang}
  29 export CXX=${CXX:-clang++}
  30 export WORK=${WORK:-$(pwd)}
  31 export OUT=${OUT:-$(pwd)/out}
  32 mkdir -p $OUT
  33
  34 build=$WORK/build
  35 rm -rf $build
  36 mkdir -p $build
  37
  38 fuzzflag="oss-fuzz=true"
  39 if [ -z "$FUZZING_ENGINE" ]; then
  40         fuzzflag="llvm-fuzz=true"
  41 fi
  42
  43 meson $build -D$fuzzflag -Db_lundef=false
  44 ninja -C $build fuzzers
  45
  46 for d in "$(dirname "$0")/../test/fuzz-corpus/"*; do
  47         zip -jqr $OUT/fuzz-$(basename "$d")_seed_corpus.zip "$d"
  48 done
  49
  50 # get fuzz-dns-packet corpus
  51 df=$build/dns-fuzzing
  52 git clone --depth 1 https://github.com/CZ-NIC/dns-fuzzing $df
  53 zip -jqr $OUT/fuzz-dns-packet_seed_corpus.zip $df/packet
  54
  55 mkdir -p $OUT/src/shared
  56 mv $build/src/shared/libsystemd-shared-*.so $OUT/src/shared
  57
  58 find $build -maxdepth 1 -type f -executable -name "fuzz-*" -exec mv {} $OUT \;
  59 cp src/fuzz/*.options $OUT