From b4e57b58c9838a7254ce5fc82ce94c8f1c1dd442 Mon Sep 17 00:00:00 2001 From: mayhem-bot Date: Fri, 3 Jun 2022 10:21:45 -0400 Subject: [PATCH] Mayhem support --- .github/workflows/expat_example-mayhem.yml | 55 +++++++++++++++++++ mayhem/Dockerfile | 27 +++++++++ mayhem/Dockerfile.dockerignore | 0 mayhem/build.sh | 30 ++++++++++ mayhem/expat_example.mayhemfile | 4 ++ mayhem/expat_example.options | 3 + mayhem/libxml2_example.options | 4 ++ mayhem/xml.dict | 64 ++++++++++++++++++++++ 8 files changed, 187 insertions(+) create mode 100644 .github/workflows/expat_example-mayhem.yml create mode 100644 mayhem/Dockerfile create mode 100644 mayhem/Dockerfile.dockerignore create mode 100755 mayhem/build.sh create mode 100644 mayhem/expat_example.mayhemfile create mode 100644 mayhem/expat_example.options create mode 100644 mayhem/libxml2_example.options create mode 100644 mayhem/xml.dict diff --git a/.github/workflows/expat_example-mayhem.yml b/.github/workflows/expat_example-mayhem.yml new file mode 100644 index 0000000..dcbda02 --- /dev/null +++ b/.github/workflows/expat_example-mayhem.yml @@ -0,0 +1,55 @@ +name: Mayhem +on: + push: + pull_request: + workflow_dispatch: + workflow_call: +env: + REGISTRY: ghcr.io + IMAGE_NAME: ${{ github.repository }} +jobs: + build: + name: ${{ matrix.os }} shared=${{ matrix.shared }} ${{ matrix.build_type }} + runs-on: ${{ matrix.os }} + strategy: + matrix: + os: [ubuntu-latest] + shared: [false] + build_type: [Release] + include: + - os: ubuntu-latest + triplet: x64-linux + steps: + - uses: actions/checkout@v2 + with: + submodules: recursive + - name: Log in to the Container registry + uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9 + with: + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: Extract metadata (tags, labels) for Docker + id: meta + uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38 + with: + images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + - name: Build and push Docker image + uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc + with: + context: . + file: mayhem/Dockerfile + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + - name: Start analysis + uses: forallsecure/mcode-action@v1 + with: + mayhem-token: ${{ secrets.MAYHEM_TOKEN }} + args: --image ${{ steps.meta.outputs.tags }} --cmd /out/expat_example --target + expat_example --file mayhem/expat_example.mayhemfile + sarif-output: sarif + - name: Upload SARIF file(s) + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: sarif diff --git a/mayhem/Dockerfile b/mayhem/Dockerfile new file mode 100644 index 0000000..c2de4c3 --- /dev/null +++ b/mayhem/Dockerfile @@ -0,0 +1,27 @@ +# Copyright 2017 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder +RUN apt-get update && apt-get install -y make autoconf automake libtool pkg-config cmake ninja-build liblzma-dev libz-dev docbook2x + +COPY . libprotobuf-mutator +RUN rm -rf libprotobuf-mutator/mayhem +WORKDIR libprotobuf-mutator + +COPY mayhem/build.sh mayhem/*.dict mayhem/*.options $SRC/ + +ENV FUZZING_LANGUAGE=c++ +RUN compile \ No newline at end of file diff --git a/mayhem/Dockerfile.dockerignore b/mayhem/Dockerfile.dockerignore new file mode 100644 index 0000000..e69de29 diff --git a/mayhem/build.sh b/mayhem/build.sh new file mode 100755 index 0000000..c8e18b4 --- /dev/null +++ b/mayhem/build.sh @@ -0,0 +1,30 @@ +#!/bin/bash -eu +# +# Copyright 2017 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +cp -f $SRC/*.dict $SRC/*.options $OUT/ + +mkdir -p build +pushd build +rm -rf * +cmake .. -GNinja -DCMAKE_BUILD_TYPE=Release \ + -DLIB_PROTO_MUTATOR_DOWNLOAD_PROTOBUF=ON \ + -DLIB_PROTO_MUTATOR_FUZZER_LIBRARIES=FuzzingEngine +ninja libxml2_example expat_example +cp -f examples/libxml2/libxml2_example $OUT/ +cp -f examples/expat/expat_example $OUT/ +popd diff --git a/mayhem/expat_example.mayhemfile b/mayhem/expat_example.mayhemfile new file mode 100644 index 0000000..fb3b74c --- /dev/null +++ b/mayhem/expat_example.mayhemfile @@ -0,0 +1,4 @@ +project: PROJECT +target: expat_example +cmds: +- cmd: /out/expat_example diff --git a/mayhem/expat_example.options b/mayhem/expat_example.options new file mode 100644 index 0000000..28f3efa --- /dev/null +++ b/mayhem/expat_example.options @@ -0,0 +1,3 @@ +[libfuzzer] +dict = xml.dict +max_len=1024 diff --git a/mayhem/libxml2_example.options b/mayhem/libxml2_example.options new file mode 100644 index 0000000..fbe4682 --- /dev/null +++ b/mayhem/libxml2_example.options @@ -0,0 +1,4 @@ +[libfuzzer] +dict = xml.dict +max_len=1000 +detect_leaks=0 diff --git a/mayhem/xml.dict b/mayhem/xml.dict new file mode 100644 index 0000000..35cf8de --- /dev/null +++ b/mayhem/xml.dict @@ -0,0 +1,64 @@ +# Copyright 2017 Google Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +"" +"" +"&a;" +"<" +"1.0" +"ANY" +"ATTLIST" +"CDATA" +"DOCTYPE" +"EBCDIC" +"ELEMENT" +"EMPTY" +"ENTITIES" +"ENTITY" +"FIXED" +"ID" +"IDREF" +"IDREFS" +"IGNORE" +"IMPLIED" +"INCLUDE" +"ISO-8859-1" +"NDATA" +"NMTOKENS" +"NOTATION" +"PCDATA" +"PUBLIC" +"REQUIRED" +"SYSTEM" +"UCS-4" +"US-ASCII" +"UTF-16" +"UTF-16BE" +"UTF-16LE" +"UTF-8" +"\"http://www.w3.org/1999/xhtml\"" +"\"http://www.w3.org/2000/xmlns\"" +"\"http://www.w3.org/XML/1998/namespace\"" +"fallback" +"http://" +"https://" +"include" +"schema" +"xml" +"xml:lang" +"xml:space" +"xmlns" +"xmlns:"