RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-26 12:17:35 +00:00
Code Issues Activity Actions

Lagom: Add an option for standalone fuzzers to BuildFuzzers.sh

Browse source 
This builds simple fuzzing binaries without any oss-fuzz specific
configuration and without any LibFuzzer instrumentation.
This commit is contained in:
Tim Schumacher 2023-04-13 16:22:03 +02:00 • committed by Sam Atkins
parent bebcf71bdc
commit dcd462a050
2 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Meta/Lagom/BuildFuzzers.sh
View file

@ -74,6 +74,13 @@ if [ "$#" -gt "0" ] && [ "--oss-fuzz" = "$1" ] ; then
-DCMAKE_PREFIX_PATH=Build/tool-install -DCMAKE_PREFIX_PATH=Build/tool-install
ninja -C Build/fuzzers ninja -C Build/fuzzers
cp Build/fuzzers/Fuzzers/Fuzz* "$OUT"/ cp Build/fuzzers/Fuzzers/Fuzz* "$OUT"/
elif [ "$#" -gt "0" ] && [ "--standalone" = "$1" ] ; then
echo "Building for standalone fuzz configuration..."
cmake -GNinja -B Build/lagom-fuzzers-standalone \
-DBUILD_LAGOM=ON \
-DENABLE_FUZZERS=ON \
-DCMAKE_PREFIX_PATH=Build/tool-install
ninja -C Build/lagom-fuzzers-standalone
else else
echo "Building for local fuzz configuration..." echo "Building for local fuzz configuration..."
pick_clang pick_clang

9
Meta/Lagom/ReadMe.md
View file

@ -63,6 +63,15 @@ To build with LLVM's libFuzzer, invoke the ``BuildFuzzers.sh`` script with no ar
(Note that we require clang >= 13, see the pick_clang() function in the script for the paths that are searched) (Note that we require clang >= 13, see the pick_clang() function in the script for the paths that are searched)
To build fuzzers without any kind of default instrumentation, pass the ``--standalone`` flag to ``BuildFuzzers.sh``:
```sh
./BuildFuzzers.sh --standalone
# This binary will read a single test input from a given filename (or, if no filename is given, from stdin) and exit.
./Build/lagom-fuzzers-standalone/Fuzzers/FuzzSomething
```
The fuzzing build's CMake cache can be manipulated with commands like `cmake -B Build/fuzzers -S . -DENABLE_LAGOM_LIBWEB=OFF`. The fuzzing build's CMake cache can be manipulated with commands like `cmake -B Build/fuzzers -S . -DENABLE_LAGOM_LIBWEB=OFF`.
Any fuzzing results (particularly slow inputs, crashes, etc.) will be dropped in the current directory. Any fuzzing results (particularly slow inputs, crashes, etc.) will be dropped in the current directory.