diff options
| author | Jeka Pats <yev.pats@gmail.com> | 2019-06-11 09:25:45 +0300 |
|---|---|---|
| committer | Evgeny Vereshchagin <evvers@ya.ru> | 2019-06-14 21:09:40 +0300 |
| commit | 53a42e6268bca45c42c54aba3ee70c433a58dc83 (patch) | |
| tree | 90a901856a27d3c7ca67ff7be5cfd934b3577727 /docs | |
| parent | c111cd98340f1a74e548cfb8386a0fe334c1f6f1 (diff) | |
| download | systemd-53a42e6268bca45c42c54aba3ee70c433a58dc83.tar.gz | |
Continuous Fuzzing Integration with Fuzzit
includes two travis ci steps:
1) Every pull-request/push all fuzzing targets will do a quick
sanity run on the generated corpus and crashes (via Fuzzit)
2) On a daily basis the fuzzing targets will be compiled (from
master) and will and their respectible fuzzing job on Fuzzit
will be updated to the new binary.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/HACKING.md | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/docs/HACKING.md b/docs/HACKING.md index b14be72128..7dc1eb98cb 100644 --- a/docs/HACKING.md +++ b/docs/HACKING.md @@ -96,8 +96,8 @@ Happy hacking! ## Fuzzers systemd includes fuzzers in `src/fuzz/` that use libFuzzer and are automatically -run by [OSS-Fuzz](https://github.com/google/oss-fuzz) with sanitizers. To add a -fuzz target, create a new `src/fuzz/fuzz-foo.c` file with a `LLVMFuzzerTestOneInput` +run by [OSS-Fuzz](https://github.com/google/oss-fuzz) and [Fuzzit](https://fuzzit.dev) with sanitizers. +To add a fuzz target, create a new `src/fuzz/fuzz-foo.c` file with a `LLVMFuzzerTestOneInput` function and add it to the list in `src/fuzz/meson.build`. Whenever possible, a seed corpus and a dictionary should also be added with new @@ -116,6 +116,10 @@ python infra/helper.py build_fuzzers --sanitizer memory systemd ../systemd python infra/helper.py run_fuzzer systemd fuzz-foo ``` +When you add a new target you should also add the target on [Fuzzit](https://app.fuzzit.dev/admin/RxqRpGNXquIvqrmp4iJS/dashboard) + (Please ask someone with permissions). One the target is configured on Fuzzit you need to add it to + `travis-ci/managers/fuzzit.sh` so the new target will run sanity tests on every pull-request and periodic fuzzing jobs. + If you find a bug that impacts the security of systemd, please follow the guidance in [CONTRIBUTING.md](CONTRIBUTING.md) on how to report a security vulnerability. |