1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
#!/bin/bash -eu
# Copyright 2019 Google Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
################################################################################
# add the flags to Qt build, gratefully borrowed from karchive
cd $SRC/qt/qtbase/mkspecs
sed -i -e "s/QMAKE_CXXFLAGS += -stdlib=libc++/QMAKE_CXXFLAGS += -stdlib=libc++ $CXXFLAGS\nQMAKE_CFLAGS += $CFLAGS/g" linux-clang-libc++/qmake.conf
sed -i -e "s/QMAKE_LFLAGS += -stdlib=libc++/QMAKE_LFLAGS += -stdlib=libc++ -lpthread $CXXFLAGS/g" linux-clang-libc++/qmake.conf
# set optimization to O1
sed -i -e "s/QMAKE_CFLAGS_OPTIMIZE = -O2/QMAKE_CFLAGS_OPTIMIZE = -O1/g" common/gcc-base.conf
sed -i -e "s/QMAKE_CFLAGS_OPTIMIZE_FULL = -O3/QMAKE_CFLAGS_OPTIMIZE_FULL = -O1/g" common/gcc-base.conf
# remove -fno-rtti which conflicts with -fsanitize=vptr when building with sanitizer undefined
sed -i -e "s/QMAKE_CXXFLAGS_RTTI_OFF = -fno-rtti/QMAKE_CXXFLAGS_RTTI_OFF = /g" common/gcc-base.conf
# build project
cd $WORK
$SRC/qt/configure -qt-libmd4c -platform linux-clang-libc++ -release -static -opensource -confirm-license -no-opengl -prefix $PWD/qtbase -D QT_NO_DEPRECATED_WARNINGS
VERBOSE=1 cmake --build . --parallel
# prepare corpus files
zip -j $WORK/cbor $SRC/qtqa/fuzzing/testcases/cbor/*
zip -j $WORK/datetime $SRC/qtqa/fuzzing/testcases/datetime/*
zip -j $WORK/html $SRC/qtqa/fuzzing/testcases/html/*
zip -j $WORK/icc $SRC/qtqa/fuzzing/testcases/icc/*
zip -j $WORK/images $SRC/qtqa/fuzzing/testcases/{bmp,gif,ico,jpg,png,svg,xbm,xpm}/* $SRC/afltestcases/images/*/*
zip -j $WORK/markdown $SRC/qtqa/fuzzing/testcases/markdown/*
zip -j $WORK/regexp.zip $SRC/qtqa/fuzzing/testcases/regexp/*
zip -j $WORK/ssl.pem.zip $SRC/qtqa/fuzzing/testcases/ssl.pem/*
zip -j $WORK/svg $SRC/qtqa/fuzzing/testcases/svg/*
zip -j $WORK/text $SRC/qtqa/fuzzing/testcases/text/* $SRC/afltestcases/others/text/*
zip -j $WORK/xml $SRC/qtqa/fuzzing/testcases/xml/* $SRC/afltestcases/others/xml/*
# build fuzzers
build_fuzzer() {
local module=$1
local proFilePath=$2
local format=${3-""}
local dictionary=${4-""}
local proFileName=${proFilePath##*/}
local exeName=${proFileName%%.*}
local proFileDir=${proFilePath%/*}
local targetName="$module"_${proFileDir//\//_}
mkdir build_fuzzer
cd build_fuzzer
$WORK/qtbase/bin/qmake $SRC/qt/$module/tests/libfuzzer/$proFilePath
# insert wanted compilers and linker into Makefile
sed -i -e "s,^CC .*,CC = $CC,g" Makefile
sed -i -e "s,^CXX .*,CXX = $CXX,g" Makefile
sed -i -e "s,^LINK .*,LINK = $CXX,g" Makefile
make -j$(nproc)
mv $exeName $OUT/$targetName
if [ -n "$format" ]; then
cp $WORK/$format.zip $OUT/"$targetName"_seed_corpus.zip
fi
if [ -n "$dictionary" ]; then
cp $dictionary $OUT/$targetName.dict
fi
cd ..
rm -r build_fuzzer
}
build_fuzzer_cmake() {
local module=$1
local srcDir="$2"
local format=${3-""}
local dictionary=${4-""}
local exeName="${srcDir##*/}"
local targetName="${module}_${srcDir//\//_}"
mkdir build_fuzzer
cd build_fuzzer
cmake -S "$SRC/qt/$module/tests/libfuzzer/$srcDir" -GNinja -DCMAKE_BUILD_TYPE:STRING=Release -DCMAKE_PREFIX_PATH:STRING="$WORK/qtbase"
VERBOSE=1 cmake --build . --parallel
mv "$exeName" "$OUT/$targetName"
if [ -n "$format" ]; then
cp "$WORK/$format.zip" "$OUT/${targetName}_seed_corpus.zip"
fi
if [ -n "$dictionary" ]; then
cp "$dictionary" "$OUT/$targetName.dict"
fi
cd ..
rm -r build_fuzzer
}
build_fuzzer "qtbase" "corelib/serialization/qcborstreamreader/next/next.pro" "cbor"
build_fuzzer "qtbase" "corelib/serialization/qcborvalue/fromcbor/fromcbor.pro" "cbor"
build_fuzzer "qtbase" "corelib/serialization/qtextstream/extractionoperator-float/extractionoperator-float.pro" "text"
build_fuzzer "qtbase" "corelib/serialization/qxmlstream/qxmlstreamreader/readnext/readnext.pro" "xml" "$SRC/afldictionaries/xml.dict"
build_fuzzer "qtbase" "corelib/text/qregularexpression/optimize/optimize.pro" "regexp" "$SRC/afldictionaries/regexp.dict"
build_fuzzer "qtbase" "corelib/time/qdatetime/fromstring/fromstring.pro" "datetime"
build_fuzzer "qtbase" "corelib/tools/qcryptographichash/result/result.pro"
build_fuzzer "qtbase" "gui/image/qimage/loadfromdata/loadfromdata.pro" "images"
build_fuzzer "qtbase" "gui/painting/qcolorspace/fromiccprofile/fromiccprofile.pro" "icc" "$SRC/afldictionaries/iccprofile.dict"
build_fuzzer "qtbase" "gui/text/qtextdocument/sethtml/sethtml.pro" "html" "$SRC/afldictionaries/html_tags.dict"
build_fuzzer "qtbase" "gui/text/qtextdocument/setmarkdown/setmarkdown.pro" "markdown" "$SRC/afldictionaries/markdown.dict"
build_fuzzer "qtbase" "gui/text/qtextlayout/beginlayout/beginlayout.pro" "text"
build_fuzzer "qtbase" "network/ssl/qsslcertificate/qsslcertificate/pem/pem.pro" "ssl.pem"
build_fuzzer_cmake "qtsvg" "svg/qsvgrenderer/render" "svg" "$SRC/afldictionaries/svg.dict"
|
