47 lines
1.3 KiB
Bash
Executable File
47 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -e
|
|
|
|
usage() {
|
|
exitcode=0
|
|
if [[ -n "$1" ]]; then
|
|
exitcode=1
|
|
echo "Error: $*"
|
|
fi
|
|
echo "Usage: $0 [fuzz-target] [run-time-in-seconds]"
|
|
exit $exitcode
|
|
}
|
|
|
|
fuzz_target=$1
|
|
if [[ -z $fuzz_target ]]; then
|
|
usage "No fuzz target provided"
|
|
fi
|
|
|
|
run_time=$2
|
|
if [[ -z $2 ]]; then
|
|
usage "No runtime provided"
|
|
fi
|
|
|
|
HFUZZ_RUN_ARGS="--run_time $run_time --exit_upon_crash" cargo hfuzz run $fuzz_target
|
|
|
|
# Until https://github.com/rust-fuzz/honggfuzz-rs/issues/16 is resolved,
|
|
# hfuzz does not return an error code on crash, so look for a crash artifact
|
|
exit_status=0
|
|
for crash_file in ./hfuzz_workspace/"$fuzz_target"/*.fuzz; do
|
|
# Check if the glob gets expanded to existing files.
|
|
if [[ -e "$crash_file" ]]; then
|
|
echo "Error: .fuzz file $crash_file found, reproduce locally with the hexdump:"
|
|
od -t x1 "$crash_file"
|
|
crash_file_base=$(basename $crash_file)
|
|
hex_output_filename=hex_"$crash_file_base"
|
|
echo "Copy / paste this output into a normal file (e.g. $hex_output_filename)"
|
|
echo "Reconstruct the binary file using:"
|
|
echo "xxd -r $hex_output_filename > $crash_file_base"
|
|
echo "To reproduce the problem, run:"
|
|
echo "cargo hfuzz run-debug $fuzz_target $crash_file_base"
|
|
exit_status=1
|
|
fi
|
|
done
|
|
|
|
exit $exit_status
|