GithubHelp home page GithubHelp logo

Comments (10)

inferno-chromium avatar inferno-chromium commented on May 10, 2024

@junyer - can you help to maintain re2 fuzzing in OSS-Fuzz. I see you added re2_fuzzer.cc in re2 repo, so this should be a simple fix in build.sh to use that. Also, best to add yourself in project.yaml as well.

from oss-fuzz.

junyer avatar junyer commented on May 10, 2024

Sent #136.

from oss-fuzz.

inferno-chromium avatar inferno-chromium commented on May 10, 2024

@junyer - just a fyi, i was just checking crash stats, re2 fuzzer is hitting a ton of hangs and that might be the reason it is not finding any other bugs. can you please check out https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=175 and fix that so that fuzzer can move forward.

from oss-fuzz.

junyer avatar junyer commented on May 10, 2024

Is that still current now that you use the fuzzer distributed with RE2? It has a check for program fanout that should defend against cases like that. (I fixed this for @kcc last year, but the change must not have made it into Chromium's copy of the fuzzer.)

from oss-fuzz.

inferno-chromium avatar inferno-chromium commented on May 10, 2024

Looks like we need to wait for builds to pick up your change. Once that is done, will comment back if that hang is gone. Or ClusterFuzz will also auto-close https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=175 then.

Right now, builds broken, see tracking - #141

from oss-fuzz.

junyer avatar junyer commented on May 10, 2024

ClusterFuzz has detected this issue as fixed in range 201612052349:201612060800.

Cool.

from oss-fuzz.

inferno-chromium avatar inferno-chromium commented on May 10, 2024

That one is gone, but there is a new one. You will see a new bug auto-filed soon.

from oss-fuzz.

junyer avatar junyer commented on May 10, 2024

https://github.com/google/re2/blob/master/re2/fuzzing/re2_fuzzer.cc#L26 might just need tweaking if the new issue turns out to be the same as the old issue.

from oss-fuzz.

inferno-chromium avatar inferno-chromium commented on May 10, 2024

Ok bug is filed - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=265. I don't understand how to tweak fanout value, can you please take a look.

from oss-fuzz.

junyer avatar junyer commented on May 10, 2024

google/re2@13fb267 reduced the fuzzer program fanout limit to 9. (The program fanout for the regular expression $(\$*|){918}$ is 10, so the fuzzer timeout should be avoided.)

from oss-fuzz.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.