• Show log

    Commit

  • Hash : 9086988f
    Author : Nick Wellnhofer
    Date : 2020-12-16T15:41:52

    Enforce maximum length of fuzz input
    
    Remove the libfuzzer max_len option which doesn't apply to other
    fuzzing engines. Enforce the maximum length directly in the fuzz
    targets. For the xml target, lower the maximum when expanding entities
    to avoid timeout and OOM errors.
    

  • README

  • libFuzzer instructions for libxml2
    ==================================
    
    Set compiler and options:
    
        export CC=clang
        export CFLAGS="-g -fsanitize=fuzzer-no-link,address,undefined \
            -fno-sanitize-recover=all \
            -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION"
    
    Build libxml2 with instrumentation:
    
        ./configure --without-python
        make
    
    Run fuzzers:
    
        make -C fuzz fuzz-xml