diff options
author | Alex Bennée <alex.bennee@linaro.org> | 2023-06-30 19:03:54 +0100 |
---|---|---|
committer | Alex Bennée <alex.bennee@linaro.org> | 2023-07-03 12:51:26 +0100 |
commit | 4ab20b513e7279c5441db2bba7d326484668d2cc (patch) | |
tree | bdb44e850be68548cd015bbe15f2a587aa844ccf /tests | |
parent | 3176990fb0307233ae5619e36b2c63241134e326 (diff) | |
download | qemu-4ab20b513e7279c5441db2bba7d326484668d2cc.zip qemu-4ab20b513e7279c5441db2bba7d326484668d2cc.tar.gz qemu-4ab20b513e7279c5441db2bba7d326484668d2cc.tar.bz2 |
tests/docker: add test-fuzz
Running the fuzzer requires some hoop jumping and some problems only
show up in containers. This basically replicates the build-oss-fuzz
job from our CI so we can run in the same containers we use in CI.
Reviewed-by: Alexander Bulekov <alxndr@bu.edu>
Signed-off-by: Alex Bennée <alex.bennee@linaro.org>
Message-Id: <20230630180423.558337-10-alex.bennee@linaro.org>
Diffstat (limited to 'tests')
-rwxr-xr-x | tests/docker/test-fuzz | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/tests/docker/test-fuzz b/tests/docker/test-fuzz new file mode 100755 index 0000000..7e506ae --- /dev/null +++ b/tests/docker/test-fuzz @@ -0,0 +1,28 @@ +#!/bin/bash -e +# +# Compile and check with oss-fuzz. +# +# Copyright (c) 2023 Linaro Ltd. +# +# Authors: +# Alex Bennée <alex.bennee@linaro.org> +# +# SPDX-License-Identifier: GPL-2.0-or-later + +. common.rc + +requires_binary clang + +# the build script runs out of $src so we need to copy across +cd "$BUILD_DIR" +cp -a $QEMU_SRC . +cd src +mkdir build-oss-fuzz +export LSAN_OPTIONS=suppressions=scripts/oss-fuzz/lsan_suppressions.txt +env CC="clang" CXX="clang++" CFLAGS="-fsanitize=address" ./scripts/oss-fuzz/build.sh +export ASAN_OPTIONS="fast_unwind_on_malloc=0" +for fuzzer in $(find ./build-oss-fuzz/DEST_DIR/ -executable -type f | grep -v slirp); do + grep "LLVMFuzzerTestOneInput" ${fuzzer} > /dev/null 2>&1 || continue ; + echo Testing ${fuzzer} ... ; + "${fuzzer}" -runs=1 -seed=1 || exit 1 ; +done |