Evgeny Vereshchagin

Now fuzz-libdwfl and fuzz-libelf can be run a few times in a row with files triggering crashes. It's another follow-up to https://github.com/google/oss-fuzz/pull/7395 and https://github.com/google/oss-fuzz/pull/7393.

cifuzz: allow passing additional args to build scripts

5

It should make it possible to have two or more GHActions testing different build configurations. More specifically, the systemd project is experimenting with Rust in https://github.com/systemd/systemd/pull/19598 and it would make...

honggfuzz seems to pass files with no hard links

5

Trying to figure out why some binaries didn't get past a certain point with `honggfuzz` but were fuzzed with `AFL++` I noticed that `honggfuzz` passed `/dev/fd/*` pointing to temporary files...

tests: varlink interfaces should probably be fuzzed

20

By analogy with `dfuzzer` fuzzing DBus interfaces I think there should be `vfuzzer` fuzzing the varlink stuff. It should help to catch issues like https://github.com/systemd/systemd/issues/22480 and somewhat cover PRs like...

AddressSanitizer: stack-overflow

3

```sh ./scripts/build-fuzzers.sh wget -O oss-fuzz-42044 https://oss-fuzz.com/download?testcase_id=4890914143731712 ./out/bpf-object-fuzzer oss-fuzz-42044 ``` ```sh INFO: Running with entropic power schedule (0xFF, 100). INFO: Seed: 3125717809 INFO: Loaded 1 modules (10860 inline 8-bit counters): 10860...

heap-buffer-overflow: WRITE of size 4

2

```sh ./scripts/build-fuzzers.sh wget -O oss-fuzz-40870 https://oss-fuzz.com/download?testcase_id=6069600031211520 ./out/bpf-object-fuzzer oss-fuzz-40870 ``` ```sh INFO: Running with entropic power schedule (0xFF, 100). INFO: Seed: 3908607909 INFO: Loaded 1 modules (10860 inline 8-bit counters): 10860...

AddressSanitizer: SEGV in bpf_object__init_user_btf_map

5

```sh ./scripts/build-fuzzers.sh wget -O oss-fuzz-42345 https://oss-fuzz.com/download?testcase_id=5041748798210048 ./out/bpf-object-fuzzer oss-fuzz-42345 ``` ```sh INFO: Running with entropic power schedule (0xFF, 100). INFO: Seed: 2844644932 INFO: Loaded 1 modules (10860 inline 8-bit counters): 10860...

```sh ./scripts/build-fuzzers.sh wget -O oss-fuzz-41410 https://oss-fuzz.com/download?testcase_id=5338681456590848 ./out/bpf-object-fuzzer oss-fuzz-41410 ``` ```sh INFO: Running with entropic power schedule (0xFF, 100). INFO: Seed: 971673186 INFO: Loaded 1 modules (10860 inline 8-bit counters): 10860...

### Expected behavior rsyslog probably shouldn't append data like that ### Steps to reproduce the behavior ```sh printf 'a\0b' | ncat --udp -U /run/systemd/journal/syslog tail -1 /var/log/syslog | xxd 00000000:...

There seems to be a memory leak in lxc_global_config_value

2

It was discovered in https://github.com/lxc/lxc/pull/3787 ``` /usr/bin/lxc-test-concurrent ================================================================= ==71688==ERROR: LeakSanitizer: detected memory leaks Direct leak of 260 byte(s) in 20 object(s) allocated from: #0 0x7f5cc57313dd in strdup (/lib/x86_64-linux-gnu/libasan.so.5+0x963dd) #1 0x7f5cc500e816...