102 lines
2.3 KiB
TOML
102 lines
2.3 KiB
TOML
# Variables
|
|
[env]
|
|
FUZZER_NAME='libpng_harness'
|
|
PROJECT_DIR = { script = ["pwd"] }
|
|
PROFILE = { value = "release", condition = {env_not_set = ["PROFILE"]} }
|
|
PROFILE_DIR = {value = "release", condition = {env_not_set = ["PROFILE_DIR"] }}
|
|
|
|
[tasks.unsupported]
|
|
script_runner="@shell"
|
|
script='''
|
|
echo "Qemu fuzzer not supported on windows"
|
|
'''
|
|
|
|
# libpng
|
|
[tasks.libpng]
|
|
linux_alias = "libpng_unix"
|
|
mac_alias = "libpng_unix"
|
|
windows_alias = "unsupported"
|
|
|
|
[tasks.libpng_unix]
|
|
condition = { files_not_exist = [ "./libpng-1.6.37" ] }
|
|
script_runner="@shell"
|
|
script='''
|
|
wget https://github.com/glennrp/libpng/archive/refs/tags/v1.6.37.tar.gz
|
|
tar -xvf v1.6.37.tar.gz
|
|
'''
|
|
|
|
# fuzzer
|
|
[tasks.fuzzer]
|
|
linux_alias = "fuzzer_unix"
|
|
mac_alias = "fuzzer_unix"
|
|
windows_alias = "unsupported"
|
|
|
|
[tasks.fuzzer_unix]
|
|
command = "cargo"
|
|
args = ["build", "--profile", "${PROFILE}"]
|
|
|
|
# Harness
|
|
[tasks.harness]
|
|
linux_alias = "harness_unix"
|
|
mac_alias = "harness_unix"
|
|
windows_alias = "unsupported"
|
|
|
|
[tasks.harness_unix]
|
|
script_runner="@shell"
|
|
script='''
|
|
cd libpng-1.6.37 && ./configure --enable-shared=no --with-pic=yes --enable-hardware-optimizations=yes
|
|
cd "${PROJECT_DIR}"
|
|
make -C libpng-1.6.37
|
|
cc -c "${PROJECT_DIR}/libfuzzer_main.c"
|
|
# Build the libpng harness
|
|
c++ \
|
|
../libfuzzer_libpng/harness.cc \
|
|
./libpng-1.6.37/.libs/libpng16.a \
|
|
./libfuzzer_main.o \
|
|
-I./libpng-1.6.37/ \
|
|
-o ${FUZZER_NAME} \
|
|
-lm -lz
|
|
'''
|
|
dependencies = ["libpng"]
|
|
|
|
# Run the fuzzer
|
|
[tasks.run]
|
|
linux_alias = "run_unix"
|
|
mac_alias = "run_unix"
|
|
windows_alias = "unsupported"
|
|
|
|
[tasks.run_unix]
|
|
command = "cargo"
|
|
args = ["run", "--profile", "${PROFILE}", "./${FUZZER_NAME}", "--", "--libafl-in", "../libfuzzer_libpng/corpus", "--libafl-out", "./out", "./${FUZZER_NAME}"]
|
|
dependencies = [ "harness", "fuzzer" ]
|
|
|
|
# Run the fuzzer
|
|
[tasks.test]
|
|
linux_alias = "test_unix"
|
|
mac_alias = "test_unix"
|
|
windows_alias = "unsupported"
|
|
|
|
# Short test
|
|
[tasks.test_unix]
|
|
script_runner = "@shell"
|
|
script='''
|
|
echo "This test is skipped. QEMU-based fuzzer doesn't work on Github runners"
|
|
'''
|
|
dependencies = [ "harness", "fuzzer" ]
|
|
|
|
# Clean up
|
|
[tasks.clean]
|
|
linux_alias = "clean_unix"
|
|
mac_alias = "clean_unix"
|
|
windows_alias = "unsupported"
|
|
|
|
[tasks.clean_unix]
|
|
# Disable default `clean` definition
|
|
clear = true
|
|
script_runner="@shell"
|
|
script='''
|
|
rm -f ./${FUZZER_NAME} libfuzzer_main.o
|
|
make -C libpng-1.6.37 clean
|
|
cargo clean
|
|
'''
|