oss-fuzz icon indicating copy to clipboard operation
oss-fuzz copied to clipboard

Published 20 hours ago • verified publisher icon google

tinyxml2 missing corpus

Open DavidKorczynski opened this issue 1 year ago • 4 comments

I noticed tinyxml2 have missed corpus for a while, causing some issues in the coverage build: https://oss-fuzz-build-logs.storage.googleapis.com/index.html#tinyxml2

Around a month ago some changes were merged that (1) changed the name of an existing harness; (2) added a new harness: https://github.com/google/oss-fuzz/pull/11985 -- could this be the culprit?

DavidKorczynski avatar Sep 04 '24 21:09 DavidKorczynski

I think I am seeing a similar issue with librsvg. The last corpus link is from August 12th and the last coverage link is from August 21st.

I read about some infrastructure issues at the time (https://github.com/google/oss-fuzz/issues/12358#issuecomment-2292276519), so I was hoping things would eventually clear up. Do the dates line up with what you're seeing?

librsvg_corpus

correctmost avatar Sep 09 '24 14:09 correctmost

For tinyxml2, this is likely due to the binary name having an extension (.cpp) that threw off ClusterFuzz. This should be fixed in https://github.com/google/oss-fuzz/commit/0203b407fd840548ddfca25d5e9fe79d7beb641b

oliverchang avatar Sep 18 '24 03:09 oliverchang

I think I am seeing a similar issue with librsvg. The last corpus link is from August 12th and the last coverage link is from August 21st.

I read about some infrastructure issues at the time (#12358 (comment)), so I was hoping things would eventually clear up. Do the dates line up with what you're seeing?

librsvg_corpus

Whatever happened here, I think it is fixed, the latest coverage report is from yesterday: https://storage.googleapis.com/oss-fuzz-coverage/librsvg/reports/20240917/linux/report.html

jonathanmetzman avatar Sep 18 '24 18:09 jonathanmetzman

Whatever happened here, I think it is fixed, the latest coverage report is from yesterday: https://storage.googleapis.com/oss-fuzz-coverage/librsvg/reports/20240917/linux/report.html

Thanks, the "Coverage" links are consistently showing up again on the Fuzzer Statistics page.

Note: sometimes the coverage reports are present on storage.googleapis.com but no corresponding link is present on the Fuzzer Statistics page. For example, librsvg/reports/20240910/linux/report.html is present but there is no link in the Sep 10, 2024 row. Maybe that was fixed with the recent infrastructure changes, though.

The corpus link is still not showing up, but I can file that separately because it does not seem related to the original tinyxml2 issue.

correctmost avatar Sep 18 '24 18:09 correctmost