With this patch applied the fuzz target can be built (with ASan) and run with ``` ./src/tests/oss-fuzz.sh ./out/fuzz-lxc-config-read doc/examples/ ``` https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32475 can be reproduced by running ``` $ echo "lxc.console.buffer.size=d" >oss-fuzz-32475 $ ./out/fuzz-lxc-config-read ./oss-fuzz-32475 INFO: Seed: 1044753468 INFO: Loaded 1 modules (18770 inline 8-bit counters): 18770 [0x883cc0, 0x888612), INFO: Loaded 1 PC tables (18770 PCs): 18770 [0x888618,0x8d1b38), ./out/fuzz-lxc-config-read: Running 1 inputs 1 time(s) each. Running: oss-fuzz-32475 ================================================================= ==2052097==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffcca063e7f at pc 0x000000659e0d bp 0x7ffcca063e30 sp 0x7ffcca063e28 READ of size 1 at 0x7ffcca063e7f thread T0 ... ``` I'll point OSS-Fuzz to the build script once this patch is merged. Signed-off-by:Evgeny Vereshchagin <evvers@ya.ru>
| Name |
Last commit
|
Last update |
|---|---|---|
| .. | ||
| Makefile.am | Loading commit data... | |
| aa.c | Loading commit data... | |
| api_reboot.c | Loading commit data... | |
| attach.c | Loading commit data... | |
| basic.c | Loading commit data... | |
| cgpath.c | Loading commit data... | |
| clonetest.c | Loading commit data... | |
| concurrent.c | Loading commit data... | |
| config_jump_table.c | Loading commit data... | |
| console.c | Loading commit data... | |
| console_log.c | Loading commit data... | |
| containertests.c | Loading commit data... | |
| createtest.c | Loading commit data... | |
| criu_check_feature.c | Loading commit data... | |
| cve-2019-5736.c | Loading commit data... | |
| destroytest.c | Loading commit data... | |
| device_add_remove.c | Loading commit data... | |
| fuzz-lxc-config-read.c | Loading commit data... | |
| get_item.c | Loading commit data... | |
| getkeys.c | Loading commit data... | |
| list.c | Loading commit data... | |
| locktests.c | Loading commit data... | |
| lxc-test-apparmor-generated | Loading commit data... | |
| lxc-test-apparmor-mount | Loading commit data... | |
| lxc-test-automount | Loading commit data... | |
| lxc-test-autostart | Loading commit data... | |
| lxc-test-checkpoint-restore | Loading commit data... | |
| lxc-test-cloneconfig | Loading commit data... | |
| lxc-test-createconfig | Loading commit data... | |
| lxc-test-exit-code | Loading commit data... | |
| lxc-test-lxc-attach | Loading commit data... | |
| lxc-test-no-new-privs | Loading commit data... | |
| lxc-test-procsys | Loading commit data... | |
| lxc-test-rootfs | Loading commit data... | |
| lxc-test-snapdeps | Loading commit data... | |
| lxc-test-symlink | Loading commit data... | |
| lxc-test-unpriv | Loading commit data... | |
| lxc-test-usernic.in | Loading commit data... | |
| lxc-test-usernsexec | Loading commit data... | |
| lxc-test-utils.c | Loading commit data... | |
| lxc_raw_clone.c | Loading commit data... | |
| lxcpath.c | Loading commit data... | |
| lxctest.h | Loading commit data... | |
| may_control.c | Loading commit data... | |
| mount_injection.c | Loading commit data... | |
| oss-fuzz.sh | Loading commit data... | |
| parse_config_file.c | Loading commit data... | |
| reboot.c | Loading commit data... | |
| saveconfig.c | Loading commit data... | |
| share_ns.c | Loading commit data... | |
| shortlived.c | Loading commit data... | |
| shutdowntest.c | Loading commit data... | |
| snapshot.c | Loading commit data... | |
| startone.c | Loading commit data... | |
| state_server.c | Loading commit data... |