[tor-bugs] #21491 [Internal Services/Service - jenkins]: Run static fuzzing test cases in jenkins builders for Tor >= 0.3.0

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 17 14:15:36 UTC 2017


#21491: Run static fuzzing test cases in jenkins builders for Tor >= 0.3.0
-----------------------------------------------------+--------------------
     Reporter:  nickm                                |      Owner:  weasel
         Type:  task                                 |     Status:  new
     Priority:  Medium                               |  Milestone:
    Component:  Internal Services/Service - jenkins  |    Version:
     Severity:  Normal                               |   Keywords:
Actual Points:                                       |  Parent ID:
       Points:                                       |   Reviewer:
      Sponsor:                                       |
-----------------------------------------------------+--------------------
 Starting in the 0.3.0, Tor supports fuzzing.

 Now, the jenkins builders shouldn't try running the fuzzers themselves --
 that consumes tons of CPU and takes forever and anyway the OSS-fuzz
 project is already doing that.

 But we do have a unit test case that runs the testcases from the fuzzing
 corpora -- just once each -- to make sure that they aren't crashing or
 anything.

 All that's needed to set this feature up on a Jenkins builder is:

   1.  Check out the git repository at https://git.torproject.org/fuzzing-
 corpora.git/

   2.  Any time before running "make check", set the environment variable
 TOR_FUZZ_CORPORA to the location of the checkout above.


 This will be useful to help us prevent security regressions.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21491>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list