ispras / oss-sydr-fuzz Goto Github PK

https://github.com/tarantool/tarantool/tree/master/test/static

cc @ligurio

Currently it's fuzzed by OSS-fuzz:

• https://www.qemu.org/docs/master/devel/fuzzing.html
• https://github.com/google/oss-fuzz/tree/master/projects/qemu

To learn and test your framework, I see that it is necessary to have the archive file sydr.zip.
Where can I find it?

## Run Hybrid Fuzzing

Unzip Sydr (`sydr.zip`) in `projects/XXX` directory:

    $ unzip sydr.zip

Package has been deprecated: https://www.npmjs.com/package/@jazzer.js/core

Hi!

I used sydr for fuzzing openssl and discovered that all sydr harnesses lack memory freeing.
This results in a memory leak.
For example, corrected asn1_sydr.c main function looks like this:

int main(int argc, char** argv)
{
  FuzzerInitialize(&argc, &argv);
  FILE* fd = fopen(argv[1], "rb");
  if (!fd) return 1;
  fseek(fd, 0, SEEK_END);
  long fsize = ftell(fd);
  fseek(fd, 0, SEEK_SET);
  char* buffer = (char*)malloc(fsize);
  fread(buffer, 1, fsize, fd);
  fclose(fd);
  int ret = FuzzerTestOneInput((const uint8_t*)buffer, fsize);
  free(buffer); // need to prevent memory leak;
  FuzzerCleanup();
  return ret;
}

I can make a pull request with fixes to openssl, but there are similar cases in other projects.
Do I need to make a pull request with fixes?

Hello,
I am very excited to sydr project, but i don`t find the sydr.zip from /projects/project/README.

We should fix swim proto dictionaries format and update Tarantool commit hash.

https://github.com/tarantool/tarantool/blob/master/test/static/swim_proto_meta_fuzzer.dict
https://github.com/tarantool/tarantool/blob/master/test/static/swim_proto_member_fuzzer.dict

cc @ligurio