[SBFT25]: Team Kraken

benchmarks/libvpx_vpx_dec_fuzzer_vp9/Dockerfile

@@ -0,0 +1,22 @@
+# Copyright 2018 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+FROM gcr.io/oss-fuzz-base/base-builder@sha256:fb1a9a49752c9e504687448d1f1a048ec1e062e2e40f7e8a23e86b63ff3dad7c
+RUN apt-get update && apt-get install -y yasm wget gcc
+RUN git clone https://chromium.googlesource.com/webm/libvpx
+ADD https://storage.googleapis.com/downloads.webmproject.org/test_data/fuzzer/vpx_fuzzer_seed_corpus.zip $SRC/
+COPY build.sh vpx_dec_fuzzer.dict $SRC/
+WORKDIR libvpx

benchmarks/libvpx_vpx_dec_fuzzer_vp9/benchmark.yaml

@@ -0,0 +1,4 @@
+commit: 9f9b7e9ba2eb9d01640a9e69a3d655866265cf7f
+commit_date: 2024-10-23 18:24:57+00:00
+fuzz_target: vpx_dec_fuzzer_vp9
+project: libvpx

benchmarks/libvpx_vpx_dec_fuzzer_vp9/build.sh

@@ -0,0 +1,63 @@
+#!/bin/bash -eu
+# Copyright 2018 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+# Build libvpx
+build_dir=$WORK/build
+rm -rf ${build_dir}
+mkdir -p ${build_dir}
+pushd ${build_dir}
+
+# oss-fuzz has 2 GB total memory allocation limit. So, we limit per-allocation
+# limit in libvpx to 1 GB to avoid OOM errors. A smaller per-allocation is
+# needed for MemorySanitizer (see bug oss-fuzz:9497 and bug oss-fuzz:9499).
+if [[ $CFLAGS = *sanitize=memory* ]]; then
+  extra_c_flags='-DVPX_MAX_ALLOCABLE_MEMORY=536870912'
+else
+  extra_c_flags='-DVPX_MAX_ALLOCABLE_MEMORY=1073741824'
+fi
+
+LDFLAGS="$CXXFLAGS" LD=$CXX $SRC/libvpx/configure \
+    --enable-vp9-highbitdepth \
+    --disable-unit-tests \
+    --disable-examples \
+    --size-limit=12288x12288 \
+    --extra-cflags="${extra_c_flags}" \
+    --disable-webm-io \
+    --enable-debug \
+    --disable-vp8-encoder \
+    --disable-vp9-encoder
+make -j$(nproc) all
+popd
+
+# build fuzzers
+fuzzer_src_name=vpx_dec_fuzzer
+fuzzer_decoders=( 'vp9' 'vp8' )
+for decoder in "${fuzzer_decoders[@]}"; do
+  fuzzer_name=${fuzzer_src_name}"_"${decoder}
+
+  $CXX $CXXFLAGS -std=c++11 \
+    -DDECODER=${decoder} \
+    -I$SRC/libvpx \
+    -I${build_dir} \
+    -Wl,--start-group \
+    $LIB_FUZZING_ENGINE \
+    $SRC/libvpx/examples/${fuzzer_src_name}.cc -o $OUT/${fuzzer_name} \
+    ${build_dir}/libvpx.a \
+    -Wl,--end-group
+  cp $SRC/vpx_fuzzer_seed_corpus.zip $OUT/${fuzzer_name}_seed_corpus.zip
+  cp $SRC/vpx_dec_fuzzer.dict $OUT/${fuzzer_name}.dict
+done

benchmarks/libvpx_vpx_dec_fuzzer_vp9/vpx_dec_fuzzer.dict

@@ -0,0 +1,8 @@
+# IVF Signature + version (bytes 0-5)
+kw1="DKIF\x00\x00"
+
+# VP9 codec fourCC (bytes 8-11)
+kw2="VP90"
+
+# VP8 codec fourCC (bytes 8-11)
+kw3="VP80"

fuzzers/kraken/builder.Dockerfile

@@ -0,0 +1,91 @@
+# Copyright 2020 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+ARG parent_image
+FROM $parent_image
+
+# Install AFL++
+
+RUN apt-get update && \
+    apt-get install -y \
+        build-essential \
+        python3-dev \
+        python3-setuptools \
+        automake \
+        cmake \
+        git \
+        flex \
+        bison \
+        libglib2.0-dev \
+        libpixman-1-dev \
+        cargo \
+        libgtk-3-dev \
+        # for QEMU mode
+        ninja-build \
+        gcc-$(gcc --version|head -n1|sed 's/\..*//'|sed 's/.* //')-plugin-dev \
+        libstdc++-$(gcc --version|head -n1|sed 's/\..*//'|sed 's/.* //')-dev
+
+# Download afl++.
+RUN git clone -b dev https://github.com/AFLplusplus/AFLplusplus /afl && \
+    cd /afl && \
+    git checkout 56d5aa3101945e81519a3fac8783d0d8fad82779 || \
+    true
+
+# Build without Python support as we don't need it.
+# Set AFL_NO_X86 to skip flaky tests.
+RUN cd /afl && \
+    unset CFLAGS CXXFLAGS && \
+    export CC=clang AFL_NO_X86=1 && \
+    PYTHON_INCLUDE=/ make && \
+    cp utils/aflpp_driver/libAFLDriver.a /
+
+# Install LibAFL
+
+# Uninstall old Rust & Install the latest one.
+RUN if which rustup; then rustup self uninstall -y; fi && \
+    curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs > /rustup.sh && \
+    sh /rustup.sh --default-toolchain nightly-2024-08-12 -y && \
+    rm /rustup.sh
+
+# Install dependencies.
+RUN apt-get update && \
+    apt-get remove -y llvm-10 && \
+    apt-get install -y \
+        build-essential \
+        lsb-release wget software-properties-common gnupg && \
+    apt-get install -y wget libstdc++5 libtool-bin automake flex bison \
+        libglib2.0-dev libpixman-1-dev python3-setuptools unzip \
+        apt-utils apt-transport-https ca-certificates joe curl && \
+    wget https://apt.llvm.org/llvm.sh && chmod +x llvm.sh && ./llvm.sh 17
+
+RUN wget https://gist.githubusercontent.com/am009/fdca247924d53d5652d907a0fc2988bb/raw/b3afecaa5a911f52cf30368b5a81593039658318/createAliases.sh && chmod u+x ./createAliases.sh && ./createAliases.sh 
+
+# Download libafl.
+RUN git clone https://github.com/AFLplusplus/LibAFL /libafl
+
+# Checkout a current commit
+RUN cd /libafl && git pull && git checkout f856092f3d393056b010fcae3b086769377cba18 || true
+# Note that due a nightly bug it is currently fixed to a known version on top!
+
+# Compile libafl.
+RUN cd /libafl && \
+    unset CFLAGS CXXFLAGS && \
+    export LIBAFL_EDGES_MAP_SIZE=2621440 && \
+    cd ./fuzzers/fuzzbench/fuzzbench && \
+    PATH="/root/.cargo/bin/:$PATH" cargo build --profile release-fuzzbench --features no_link_main
+
+# Auxiliary weak references.
+RUN cd /libafl/fuzzers/fuzzbench/fuzzbench && \
+    clang -c stub_rt.c && \
+    ar r /stub_rt.a stub_rt.o

fuzzers/kraken/description.md

@@ -0,0 +1,3 @@
+# Kraken
+
+Kraken is an ensemble fuzzer.