Comments (5)
evverx
commented on April 30, 2024
Looking at https://github.com/evverx/libbpf/actions/runs/1727948413, it seems artifacts uploaded by CFLite in PRs don't contain the names of fuzz targets either:
$ unzip -l crashes-bpf-object-fuzzer_2.zip
Archive: crashes-bpf-object-fuzzer_2.zip
Length Date Time Name
--------- ---------- ----- ----
0 01-21-2022 09:35 address/
0 01-21-2022 09:35 memory/
0 01-21-2022 09:35 undefined/
269 01-21-2022 09:35 address/crash-560ab4bce5d578289415a41a9f173ab308185a55-minimized
3297 01-21-2022 09:35 address/crash-560ab4bce5d578289415a41a9f173ab308185a55.summary
269 01-21-2022 09:35 address/crash-560ab4bce5d578289415a41a9f173ab308185a55
200 01-21-2022 09:35 memory/crash-2834c46d2509f43f12d270197693e1f5f772b14e-minimized
4536 01-21-2022 09:35 memory/crash-2834c46d2509f43f12d270197693e1f5f772b14e.summary
200 01-21-2022 09:35 memory/crash-2834c46d2509f43f12d270197693e1f5f772b14e
269 01-21-2022 09:35 undefined/crash-560ab4bce5d578289415a41a9f173ab308185a55-minimized
2789 01-21-2022 09:35 undefined/crash-560ab4bce5d578289415a41a9f173ab308185a55.summary
269 01-21-2022 09:35 undefined/crash-560ab4bce5d578289415a41a9f173ab308185a55
--------- -------
12098 12 files
from clusterfuzzlite.
jonathanmetzman
commented on April 30, 2024
Looking at https://github.com/evverx/libbpf/actions/runs/1727948413, it seems artifacts uploaded by CFLite in PRs don't contain the names of fuzz targets either:
$ unzip -l crashes-bpf-object-fuzzer_2.zip Archive: crashes-bpf-object-fuzzer_2.zip Length Date Time Name --------- ---------- ----- ---- 0 01-21-2022 09:35 address/ 0 01-21-2022 09:35 memory/ 0 01-21-2022 09:35 undefined/ 269 01-21-2022 09:35 address/crash-560ab4bce5d578289415a41a9f173ab308185a55-minimized 3297 01-21-2022 09:35 address/crash-560ab4bce5d578289415a41a9f173ab308185a55.summary 269 01-21-2022 09:35 address/crash-560ab4bce5d578289415a41a9f173ab308185a55 200 01-21-2022 09:35 memory/crash-2834c46d2509f43f12d270197693e1f5f772b14e-minimized 4536 01-21-2022 09:35 memory/crash-2834c46d2509f43f12d270197693e1f5f772b14e.summary 200 01-21-2022 09:35 memory/crash-2834c46d2509f43f12d270197693e1f5f772b14e 269 01-21-2022 09:35 undefined/crash-560ab4bce5d578289415a41a9f173ab308185a55-minimized 2789 01-21-2022 09:35 undefined/crash-560ab4bce5d578289415a41a9f173ab308185a55.summary 269 01-21-2022 09:35 undefined/crash-560ab4bce5d578289415a41a9f173ab308185a55 --------- ------- 12098 12 files
I'm confused (maybe because it's late here :-) isn't the name of the fuzz target in the zipfile name?
from clusterfuzzlite.
jonathanmetzman
commented on April 30, 2024
In https://github.com/evverx/libbpf/actions/runs/1728290427 the first "pruning" job uploaded a file named
crashes-bpf-object-fuzzer:$ unzip -l crashes-bpf-object-fuzzer.zip Archive: crashes-bpf-object-fuzzer.zip Length Date Time Name --------- ---------- ----- ---- 0 01-21-2022 10:59 address/ 417 01-21-2022 10:59 address/crash-1361a2bb8c3090236eff2b9eede58dd6af20bdc2 269 01-21-2022 10:59 address/crash-560ab4bce5d578289415a41a9f173ab308185a55 2560 01-21-2022 10:59 address/crash-65c8d13701ba5d2e2686fb2edf502a383f2602f2 520 01-21-2022 10:59 address/crash-6d9b7d4464f9f2bb3f1f9248873cf07d983338bc 2624 01-21-2022 10:59 address/crash-a88f6ed52a54dea0797beb168d56999d32d252f4 520 01-21-2022 10:59 address/crash-c52e9ecec9d012f86b3de6784d6192911da71825 525 01-21-2022 10:59 address/crash-fd369cf6cc2489d62360426a9d63e487f8df8fec --------- ------- 7435 8 filesI'm not sure whether it should have been uploaded in the first place but artifacts uploaded by CFLite/CIFuzz usually contain summaries and the names of fuzz targets:
$ unzip -l address-artifacts.zip Archive: address-artifacts.zip Length Date Time Name --------- ---------- ----- ---- 0 01-23-2022 19:29 fuzz-dhcp-server/ 0 01-23-2022 19:29 fuzz-dhcp-server/address/ 9240 01-23-2022 19:29 fuzz-dhcp-server/address/crash-64c861ad981838e509920e8538640ef46feaae66.summary 251 01-23-2022 19:29 fuzz-dhcp-server/address/crash-64c861ad981838e509920e8538640ef46feaae66 --------- ------- 9491 4 files
I think this has to do with the differences in how merge is handled. I'll look into whether this is an easy fix.
from clusterfuzzlite.
evverx
commented on April 30, 2024
I'm confused (maybe because it's late here :-) isn't the name of the fuzz target in the zipfile name?
Apparently it is :-) I'm not sure how I overlooked that :-) It's just that I expected that CFLite would put all crashes in one archive to make it easier to download them in one fell swoop.
from clusterfuzzlite.
evverx
commented on April 30, 2024
I'm not sure why I didn't close this. Closing.
from clusterfuzzlite.
Related Issues (20)
- Gitlab instructions do not just work. HOT 14
- Investigate providing reusable workflows for GitHub users
- build.sh example for go test -fuzz HOT 16
- Failing to build python project HOT 1
- run fuzzers with -jobs (or -workers?) for parallelism HOT 6
- ClusterfuzzLite does not check out submodules HOT 2
- Affordances for "local maxima" in coverage HOT 4
- Requesting addition of AFL++ Fuzzer Engine. HOT 5
- Document how to provide dictionaries and seed corpus to fuzzers HOT 6
- Empty Coverage Reports using ClusterFuzzLite with Prow and GO
- Allow to customize FUZZ_SECONDS option per target HOT 2
- Minimal gitlab configuration is failing to cp to default $OUT HOT 13
- Demo or sample project for Python? HOT 2
- Timeout in pruning job HOT 2
- Possible to continue fuzzing despite errors? HOT 2
- CFLite seems to fail to download the latest builds due to "Bad credentials" HOT 2
- Undefined references to C++ standard library symbols HOT 13
- There doesn't seem to be a way to use the latest docker images (without the "v1" tag) HOT 4
- Mention in docs that OSS-Fuzz has a lot of examples to learn from
- jazzer_driver not available in local infra/helper.py run_fuzzer command HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from clusterfuzzlite.