clusterfuzzlite

clusterfuzzlite copied to clipboard

Gitlab instructions do not just work.

13

I had to make [this config file](https://gitlab.com/metzman/cfl-gitlab/-/blob/ea4d5f97e13196b29b67ddcba88784fa9981a26b/.gitlab-ci.yml) which borrowed from https://gitlab.com/securitykernel/cflite-example/-/blob/main/.gitlab-ci.yml#L7 because the docs were incomplete. CC @catenacyber

jonathanmetzman

run fuzzers with -jobs (or -workers?) for parallelism

3

github actions provides two cores, but clusterfuzzlite only uses 1. passing `-j $(ncpu)` gets free extra capacity :-)

alex

Failing to build python project

1

[This CFL setup](https://github.com/samuelcolvin/pydantic/pull/4287) is breaking in the build process on [this line](https://github.com/samuelcolvin/pydantic/blob/master/pydantic/typing.py#L4). The build works fine on OSS-Fuzz but fails to complete in the CI. Stacktrace from [the log](https://github.com/samuelcolvin/pydantic/runs/7655925047?check_suite_focus=true#step:4:137): ```Compiling...

AdamKorcz

There doesn't seem to be a way to run all fuzz targets in PRs

17

Both CFLite and CIFuzz exit as soon as they discover a bug but it would be great if it was possible to let them run all fuzz targets and report...

evverx

Per: https://docs.github.com/en/actions/using-workflows/reusing-workflows#creating-a-reusable-workflow This may make our instructions a lot simpler.

oliverchang

See https://github.com/google/clusterfuzzlite/issues/94#issuecomment-1107716187_

jonathanmetzman

There doesn't seem to be a way to exclude corpora from artifacts

7

From https://github.com/google/oss-fuzz/pull/7186#issuecomment-1025000134 I think CFLite should pass `UPLOAD_BUILD` to `build_fuzzers` to make it possible to exclude those large corpora from artifacts. Without that environment variable I can't skip that step...

evverx

Create interface for OSS-Fuzz users.

11

Related: https://github.com/google/oss-fuzz/issues/7479

jonathanmetzman

Possible to continue fuzzing despite errors?

2

Hi, Is there a setting to continue fuzzing and ignore crashes? Possibly deduplicating the crashes? Currently the fuzzer stops at the first found crash, but this is not very helpful...

sudden6

Timeout in pruning job

3

Getting logs like ``` 2022-02-15 09:19:54,828 - root - INFO - Done downloading corpus. Contains 5964 elements. Traceback (most recent call last): File "/opt/oss-fuzz/infra/cifuzz/cifuzz_combined_entrypoint.py", line 40, in sys.exit(main()) File "/opt/oss-fuzz/infra/cifuzz/cifuzz_combined_entrypoint.py",...

catenacyber