etc~ scripts and random things |
| git clone https://github.com/djnnvx/etc.git |
| log | files | refs | archive |
| commit 8dcb67e98d00e76b79e3319b8a0cc55ef0d3ef59
parent a9486ff87a71e8c4f17ad2b3b0aba73a5faf0c6c Author: djnn <[email protected]> Date: Thu, 28 May 2026 14:27:39 +0900 dropping fsanitize because its hella noisy Diffstat:
|
| 1 file changed, 4 insertions(+), 1 deletion(-) |
diff --git a/fuzzing/libksba/setup.sh b/fuzzing/libksba/setup.sh @@ -16,7 +16,10 @@ AFL_BIN="${SCRIPT_DIR}/afl-build/usr/local/bin" LIBKSBA_REPO="${LIBKSBA_REPO:-https://github.com/gpg/libksba.git}" LIBKSBA_TAG="${LIBKSBA_TAG:-master}" -CFLAGS_FUZZ="-fsanitize=address,undefined,signed-integer-overflow -g -O0 -fno-omit-frame-pointer" +# Drop signed-integer-overflow + shift from UBSan: libksba's DER decoders use the +# `c = *s++ << 24` idiom (unsigned char promoted to signed int) which trips +# shift-base for any value >= 0x80 << 24. Pure noise. Real OOBs still caught by ASan. +CFLAGS_FUZZ="-fsanitize=address,undefined -fno-sanitize=signed-integer-overflow,shift -g -O0 -fno-omit-frame-pointer" CFLAGS_FUZZ+=" -Wno-implicit-function-declaration -Wno-unused-function -Wno-unused-variable" HARNESSES="fuzz_cert fuzz_crl fuzz_ocsp fuzz_cms" |