7 REPO_ROOT
=${REPO_ROOT:-$(pwd)}
9 sudo bash
-c "echo 'deb-src http://archive.ubuntu.com/ubuntu/ xenial main restricted universe multiverse' >>/etc/apt/sources.list"
10 sudo apt-get update
-y
11 sudo apt-get build-dep systemd
-y
12 sudo apt-get
install -y ninja-build python3-pip python3-setuptools
16 export PATH
="$HOME/.local/bin/:$PATH"
18 # We use a subset of https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html#available-checks instead of "undefined"
19 # because that's how the fuzzers are built on OSS-Fuzz: https://github.com/google/oss-fuzz/blob/a3c935fe9ca7f82bafa520731525e1cc38acf650/infra/base-images/base-builder/Dockerfile#L33-L34
20 # and we know they don't fail there. We can turn on everything else later after the issues mentioned in
21 # https://github.com/systemd/systemd/pull/12771#issuecomment-502139157 are sorted out at least.
22 # TODO: "null" should probably be added too. On OSS-Fuzz it was turned off in https://github.com/google/oss-fuzz/pull/674
23 # TODO: figure out what to do about unsigned-integer-overflow: https://github.com/google/oss-fuzz/issues/910
24 export SANITIZER
="address -fsanitize=bool,array-bounds,float-divide-by-zero,function,integer-divide-by-zero,return,shift,signed-integer-overflow,unsigned-integer-overflow,vla-bound,vptr -fno-sanitize-recover=bool,array-bounds,float-divide-by-zero,function,integer-divide-by-zero,return,shift,signed-integer-overflow,vla-bound,vptr"
27 FUZZING_TYPE
=${1:-sanity}
28 if [ "$TRAVIS_PULL_REQUEST" = "false" ]; then
29 FUZZIT_BRANCH
="${TRAVIS_BRANCH}"
31 FUZZIT_BRANCH
="PR-${TRAVIS_PULL_REQUEST}"
34 # Because we want Fuzzit to run on every pull-request and Travis/Azure doesnt support encrypted keys
35 # on pull-request we use a write-only key which is ok for now. maybe there will be a better solution in the future
36 FUZZIT_API_KEY
=7c1bd82fe0927ffe1b4bf1e2e86cc812b28dfe08a7080a7bf498e98715884a163402ee37ba95d4b1637247deffcea43e
37 FUZZIT_ADDITIONAL_FILES
="./out/src/shared/libsystemd-shared-242.so"
39 # ASan options are borrowed almost verbatim from OSS-Fuzz
40 ASAN_OPTIONS
=redzone
=32:print_summary
=1:handle_sigill
=1:allocator_release_to_os_interval_ms
=500:print_suppressions
=0:strict_memcmp
=1:allow_user_segv_handler
=0:allocator_may_return_null
=1:use_sigaltstack
=1:handle_sigfpe
=1:handle_sigbus
=1:detect_stack_use_after_return
=1:alloc_dealloc_mismatch
=0:detect_leaks
=1:print_scariness
=1:max_uar_stack_size_log
=16:handle_abort
=1:check_malloc_usable_size
=0:quarantine_size_mb
=64:detect_odr_violation
=0:handle_segv
=1:fast_unwind_on_fatal
=0
41 UBSAN_OPTIONS
=print_stacktrace
=1:print_summary
=1:halt_on_error
=1:silence_unsigned_overflow
=1
42 FUZZIT_ARGS
="--type ${FUZZING_TYPE} --branch ${FUZZIT_BRANCH} --revision ${TRAVIS_COMMIT} --asan_options ${ASAN_OPTIONS} --ubsan_options ${UBSAN_OPTIONS}"
43 wget
-O fuzzit https
://bin.fuzzit.dev
/fuzzit-1.1
46 .
/fuzzit auth
${FUZZIT_API_KEY}
48 # The following was generated with
49 # ./fuzzit get targets | jq --raw-output '.target_name + " " + .id' | perl -alne 'printf("./fuzzit c job \${FUZZIT_ARGS} %s ./out/%s \${FUZZIT_ADDITIONAL_FILES}\n", $F[1], $F[0])'
50 .
/fuzzit c job
${FUZZIT_ARGS} 2ODbhEjfRF2AZtrUotMh .
/out
/fuzz-bus-label
${FUZZIT_ADDITIONAL_FILES}
51 .
/fuzzit c job
${FUZZIT_ARGS} 62XnUyWTLAvIRh1vFkEw .
/out
/fuzz-journald-stream
${FUZZIT_ADDITIONAL_FILES}
52 .
/fuzzit c job
${FUZZIT_ARGS} 6AdGwIiI3l1Edu9V4fvF .
/out
/fuzz-env-file
${FUZZIT_ADDITIONAL_FILES}
53 .
/fuzzit c job
${FUZZIT_ARGS} 7ubB
4DVu
2EiYgPVtRUNV .
/out
/fuzz-calendarspec
${FUZZIT_ADDITIONAL_FILES}
54 .
/fuzzit c job
${FUZZIT_ARGS} 8D0NrVtSwTpl23a9k0vv .
/out
/fuzz-nspawn-oci
${FUZZIT_ADDITIONAL_FILES}
55 .
/fuzzit c job
${FUZZIT_ARGS} 8tbrzwxsaIPalIRBHtK8 .
/out
/fuzz-link-parser
${FUZZIT_ADDITIONAL_FILES}
56 .
/fuzzit c job
${FUZZIT_ARGS} 9T5He9cANxHTBLaBURpz .
/out
/fuzz-journald-kmsg
${FUZZIT_ADDITIONAL_FILES}
57 .
/fuzzit c job
${FUZZIT_ARGS} BRaEBuU7QVlSp1HOjlDb .
/out
/fuzz-udev-database
${FUZZIT_ADDITIONAL_FILES}
58 .
/fuzzit c job
${FUZZIT_ARGS} DcE70rAA2mhrxdyBRH90 .
/out
/fuzz-udev-rules
${FUZZIT_ADDITIONAL_FILES}
59 .
/fuzzit c job
${FUZZIT_ARGS} KH6VEpV0ZoWynASJHm8z .
/out
/fuzz-dhcp6-client
${FUZZIT_ADDITIONAL_FILES}
60 .
/fuzzit c job
${FUZZIT_ARGS} MZNs1JG5UQstaIvfHYgb .
/out
/fuzz-netdev-parser
${FUZZIT_ADDITIONAL_FILES}
61 .
/fuzzit c job
${FUZZIT_ARGS} P1MpkewCNQCYLdMFggnU .
/out
/fuzz-journald-audit
${FUZZIT_ADDITIONAL_FILES}
62 .
/fuzzit c job
${FUZZIT_ARGS} RmD47BxVRbAZlq07XW30 .
/out
/fuzz-unit-file
${FUZZIT_ADDITIONAL_FILES}
63 .
/fuzzit c job
${FUZZIT_ARGS} S0dGMaaGwkvsLc0IqIJ7 .
/out
/fuzz-catalog
${FUZZIT_ADDITIONAL_FILES}
64 .
/fuzzit c job
${FUZZIT_ARGS} X7qIoGLAoBgjVf19SfvY .
/out
/fuzz-compress
${FUZZIT_ADDITIONAL_FILES}
65 .
/fuzzit c job
${FUZZIT_ARGS} YAfecldFs2xaXn0Ws1BE .
/out
/fuzz-dns-packet
${FUZZIT_ADDITIONAL_FILES}
66 .
/fuzzit c job
${FUZZIT_ARGS} bgRZAE9E5uXRbUX76tId .
/out
/fuzz-ndisc-rs
${FUZZIT_ADDITIONAL_FILES}
67 .
/fuzzit c job
${FUZZIT_ARGS} cXCm75EhdDf5t2sSBLRC .
/out
/fuzz-hostname-util
${FUZZIT_ADDITIONAL_FILES}
68 .
/fuzzit c job
${FUZZIT_ARGS} cbgsYEyX6776MHFotO9O .
/out
/fuzz-nspawn-settings
${FUZZIT_ADDITIONAL_FILES}
69 .
/fuzzit c job
${FUZZIT_ARGS} d8lokp0LCLYgQwI7vyx6 .
/out
/fuzz-journald-native-fd
${FUZZIT_ADDITIONAL_FILES}
70 .
/fuzzit c job
${FUZZIT_ARGS} eoc9rbm2jKqIEg6Kdonv .
/out
/fuzz-network-parser
${FUZZIT_ADDITIONAL_FILES}
71 .
/fuzzit c job
${FUZZIT_ARGS} ezQIlJWCX3xPUJdhLnWM .
/out
/fuzz-dhcp-server
${FUZZIT_ADDITIONAL_FILES}
72 .
/fuzzit c job
${FUZZIT_ARGS} ge3eTzephghWD3Stw2TE .
/out
/fuzz-journald-syslog
${FUZZIT_ADDITIONAL_FILES}
73 .
/fuzzit c job
${FUZZIT_ARGS} nPIt1SCDkGkSFDth5RlG .
/out
/fuzz-json
${FUZZIT_ADDITIONAL_FILES}
74 .
/fuzzit c job
${FUZZIT_ARGS} nU0lRNNkQrXirDMNOpR1 .
/out
/fuzz-varlink
${FUZZIT_ADDITIONAL_FILES}
75 .
/fuzzit c job
${FUZZIT_ARGS} pzrzgLQY2cG8Iexb0tOt .
/out
/fuzz-journal-remote
${FUZZIT_ADDITIONAL_FILES}
76 .
/fuzzit c job
${FUZZIT_ARGS} qCWFcENjlfWJX0Q3cIOT .
/out
/fuzz-journald-native
${FUZZIT_ADDITIONAL_FILES}
77 .
/fuzzit c job
${FUZZIT_ARGS} s7d3LuRbkETCPSyxUvW8 .
/out
/fuzz-time-util
${FUZZIT_ADDITIONAL_FILES}
78 .
/fuzzit c job
${FUZZIT_ARGS} udjVYJfH4N01vaHNF5Kv .
/out
/fuzz-lldp
${FUZZIT_ADDITIONAL_FILES}
79 .
/fuzzit c job
${FUZZIT_ARGS} vbYVccyWoDdgqzrQeln8 .
/out
/fuzz-bus-message
${FUZZIT_ADDITIONAL_FILES}