Green Sky
b1fe064484
73d9b845a3 cleanup: Remove old type-ordered event getters. b0840cc02d feat: add ngc events 7df9a51349 refactor: Make event dispatch ordered by receive time. bcb6592af5 test: Add C++ classes wrapping system interfaces. 4cea4f9ca4 fix: Make all the fuzzers work again, and add a test for protodump. c4e209ea1d refactor: Factor out malloc+memcpy into memdup. 87bcc4322d fix: Remove fatal error for non-erroneous case REVERT: 6d634674a9 cleanup: Remove old type-ordered event getters. REVERT: d1d48d1dfc feat: add ngc events REVERT: 994ffecc6b refactor: Make event dispatch ordered by receive time. git-subtree-dir: external/toxcore/c-toxcore git-subtree-split: 73d9b845a310c3f56d2d6d77ed56b93d84256d6e
127 lines
3.0 KiB
Bash
Executable File
127 lines
3.0 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
COMMON_CMAKE_OPTIONS="-DCMAKE_C_COMPILER=afl-clang-lto -DCMAKE_CXX_COMPILER=afl-clang-lto++ -DBUILD_TOXAV=OFF -DENABLE_SHARED=NO -DBUILD_FUZZ_TESTS=ON -DDHT_BOOTSTRAP=OFF -DBOOTSTRAP_DAEMON=OFF"
|
|
|
|
# move to repo root
|
|
cd ../
|
|
|
|
# build fuzz_test target UBSAN
|
|
mkdir -p _afl_build_ubsan
|
|
cd _afl_build_ubsan
|
|
|
|
export AFL_USE_UBSAN=1
|
|
|
|
# build c-toxcore using afl instrumentation
|
|
cmake -DCMAKE_BUILD_TYPE=Debug "$COMMON_CMAKE_OPTIONS" ..
|
|
|
|
# build fuzz_test target
|
|
cmake --build ./ --target bootstrap_fuzz_test
|
|
|
|
unset AFL_USE_UBSAN
|
|
|
|
cd ..
|
|
|
|
# build fuzz_test target MSAN
|
|
mkdir -p _afl_build_msan
|
|
cd _afl_build_msan
|
|
|
|
export AFL_USE_MSAN=1
|
|
|
|
# build c-toxcore using afl instrumentation
|
|
cmake -DCMAKE_BUILD_TYPE=Debug "$COMMON_CMAKE_OPTIONS" ..
|
|
|
|
# build fuzz_test target
|
|
cmake --build ./ --target bootstrap_fuzz_test
|
|
|
|
unset AFL_USE_MSAN
|
|
|
|
cd ..
|
|
|
|
# build fuzz_test target ASAN
|
|
mkdir -p _afl_build_asan
|
|
cd _afl_build_asan
|
|
|
|
export AFL_USE_ASAN=1
|
|
|
|
# build c-toxcore using afl instrumentation
|
|
cmake -DCMAKE_BUILD_TYPE=Debug "$COMMON_CMAKE_OPTIONS" ..
|
|
|
|
# build fuzz_test target
|
|
cmake --build ./ --target bootstrap_fuzz_test
|
|
|
|
unset AFL_USE_ASAN
|
|
|
|
cd ..
|
|
|
|
# build fuzz_test target without sanitizers for afl-tmin
|
|
mkdir -p _afl_build
|
|
cd _afl_build
|
|
|
|
# build c-toxcore using afl instrumentation
|
|
cmake -DCMAKE_BUILD_TYPE=Debug "$COMMON_CMAKE_OPTIONS" ..
|
|
|
|
# build fuzz_test target
|
|
cmake --build ./ --target bootstrap_fuzz_test
|
|
|
|
cd ..
|
|
|
|
# build fuzz_test target with CmpLog
|
|
mkdir -p _afl_build_cmplog
|
|
cd _afl_build_cmplog
|
|
|
|
export AFL_LLVM_CMPLOG=1
|
|
|
|
# build c-toxcore using afl instrumentation
|
|
cmake -DCMAKE_BUILD_TYPE=Debug "$COMMON_CMAKE_OPTIONS" ..
|
|
|
|
# build fuzz_test target
|
|
cmake --build ./ --target bootstrap_fuzz_test
|
|
|
|
unset AFL_LLVM_CMPLOG
|
|
|
|
cd ..
|
|
|
|
# build fuzz_test target for code coverage
|
|
mkdir -p _cov_build
|
|
cd _cov_build
|
|
|
|
# build c-toxcore using afl instrumentation
|
|
cmake -DCMAKE_BUILD_TYPE=Debug -DCMAKE_CXX_FLAGS="-fprofile-arcs -ftest-coverage" -DCMAKE_C_FLAGS="-fprofile-arcs -ftest-coverage" -DCMAKE_VERBOSE_MAKEFILE=ON "$COMMON_CMAKE_OPTIONS" ..
|
|
|
|
# build fuzz_test target
|
|
cmake --build ./ --target bootstrap_fuzz_test
|
|
|
|
# back to repo root
|
|
cd ../
|
|
|
|
# Create fuzz_test working directory
|
|
|
|
mkdir -p _afl_out
|
|
|
|
AFL_ARGS='-i testing/afl_testdata/tox_bootstraps/ -o _afl_out'
|
|
|
|
export AFL_IMPORT_FIRST=1
|
|
export AFL_AUTORESUME=1
|
|
|
|
# faster startup
|
|
export AFL_FAST_CAL=1
|
|
|
|
echo "connect to the fuzz_tests using: screen -x fuzz"
|
|
echo "if fuzzing doesn't start execute the following as root:"
|
|
echo ""
|
|
echo "echo core >/proc/sys/kernel/core_pattern"
|
|
echo "echo performance | tee /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor"
|
|
|
|
# Main fuzz_test, keeps complete corpus
|
|
screen -dmS fuzz afl-fuzz -M fuzz0 "$AFL_ARGS" -c ./_afl_build_cmplog/bootstrap_fuzz_test ./_afl_build/bootstrap_fuzz_test
|
|
sleep 10s
|
|
|
|
# Secondary fuzz_tests
|
|
screen -S fuzz -X screen afl-fuzz -S fuzz1 "$AFL_ARGS" -- ./_afl_build_msan/bootstrap_fuzz_test
|
|
sleep 1s
|
|
|
|
screen -S fuzz -X screen afl-fuzz -S fuzz2 "$AFL_ARGS" ./_afl_build_ubsan/bootstrap_fuzz_test
|
|
sleep 1s
|
|
|
|
screen -S fuzz -X screen afl-fuzz -S fuzz3 "$AFL_ARGS" ./_afl_build_asan/bootstrap_fuzz_test
|