Stefan Profanter
92e0e8ca8b
fix(fuzz): Temporarily disable run_fuzzer for mdns (produces false positives)
|
%!s(int64=5) %!d(string=hai) anos | |
|---|---|---|
| .. | ||
| fuzz_binary_message_corpus | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_json | %!s(int64=5) %!d(string=hai) anos | |
| CMakeLists.txt | %!s(int64=5) %!d(string=hai) anos | |
| README.md | %!s(int64=5) %!d(string=hai) anos | |
| check_build.sh | %!s(int64=5) %!d(string=hai) anos | |
| corpus_generator.c | %!s(int64=5) %!d(string=hai) anos | |
| custom_memory_manager.c | %!s(int64=5) %!d(string=hai) anos | |
| custom_memory_manager.h | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_base64_decode.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_base64_encode.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_binary_decode.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_binary_message.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_binary_message.options | %!s(int64=6) %!d(string=hai) anos | |
| fuzz_binary_message_header.dict | %!s(int64=6) %!d(string=hai) anos | |
| fuzz_json_decode.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_json_decode_encode.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_src_ua_util.cc | %!s(int64=5) %!d(string=hai) anos | |
| fuzz_src_ua_util.options | %!s(int64=6) %!d(string=hai) anos | |
| fuzz_src_ua_util_endpoints.dict | %!s(int64=6) %!d(string=hai) anos | |
| fuzz_tcp_message.cc | %!s(int64=5) %!d(string=hai) anos | |
| generate_corpus.sh | %!s(int64=5) %!d(string=hai) anos | |
| oss-fuzz-copy.sh | %!s(int64=5) %!d(string=hai) anos | |
| ua_debug_dump_pkgs_file.c | %!s(int64=5) %!d(string=hai) anos | |
README.md
I Can haz fuzz
open62541 is continuously tested with the awesome oss-fuzz project from Google: https://github.com/google/oss-fuzz
Currently tested is processing of binary messages and encoding/decoding of binary encoded data.
Reproduce locally
Reproduce build failure
You can just execute the script under tests/fuzz/check_build.sh, which does the following:
# clone oss-fuzz repo
cd oss-fuzz
# Change $OPEN62541_DIR to your local checkout of open62541
python infra/helper.py build_fuzzers --sanitizer address open62541 $OPEN62541_DIR && python infra/helper.py check_build --sanitizer address open62541
Reproduce issues
Download the testcase file and store it e.g. in your Download folder.
# clone oss-fuzz repo
cd oss-fuzz
# Change $OPEN62541_DIR to your local checkout of open62541
# And change $DOWNLOADS to your download location
python infra/helper.py build_fuzzers --sanitizer address open62541 $OPEN62541_DIR && python infra/helper.py reproduce open62541 fuzz_binary_decode $DOWNLOADS/clusterfuzz-testcase-minimized-fuzz_binary_decode-5686300273803264
Status
Update the corpus
To update the current corpus used for fuzzing you need to follow these steps. It will execute all the unit tests, dump the received data packages to a directory and then update and merge the corpus.
The script will create two directories:
open62541/build_fuzzandopen62541/build_corpus. Make sure that these directories are not existing or do not contain any important data.Run the generate script:
open62541/tests/fuzz/generate_corpus.sh
This script will build all the unit tests, dump the packages and then merge the current corpus with the new packages.
- If there is new coverage with the generated data there will be new files in the directory:
open62541/fuzz/fuzz_binary_message_corpus/generated
Commit the new files and then you can delete the build directories created in step 1.