Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

improve example, list requirements #334

Open
mark-pictor-csec opened this issue Dec 11, 2023 · 3 comments
Open

improve example, list requirements #334

mark-pictor-csec opened this issue Dec 11, 2023 · 3 comments

Comments

@mark-pictor-csec
Copy link

It'd be nice to have a complete use example that can be copied and pasted. The current example has some commands that need to run within the fuzz_ng/ dir and some without.

I'd also like a list of required tools/libs and their versions.
For example, something like

  • requires protoc >= v1.2.3 from http://example.com/protoc
  • requires libFuzzer from
  • requires a C++ compiler
    • known to work with clang >= v4.5.6
    • known to work with gcc <= v2.72
  • requires go >=v1.17.0 from

Also, why is go114-fuzz-build named such? Until I noticed the go.mod I assumed the tool must be limited to features available in go1.14. It might be worthwhile to rename this.

@catenacyber
Copy link
Owner

Thanks @mark-pictor-csec for your interest in this project.

Indeed, this is missing documentation.
The best one is the oss-fuzz builders :
https://github.com/google/oss-fuzz/tree/master/projects/ngolo-fuzzing
https://github.com/google/oss-fuzz/tree/master/projects/ngolo-fuzzing-x

The Dockerfile there install all the required tools/libs that you list.
I do not know the minimum supported version for these tools...

Also, why is go114-fuzz-build named such?

I think this is because go1.14 introduced libFuzzer support
cf https://github.com/mdempsky/go114-fuzz-build

(Likewise, go119-fuzz-build is about native fuzzing introduced in golang 1.19)

But this currently works with go1.21 on oss-fuzz

Is this helping you ?
Please feel free to open a PR to bring more documentation in ;-)

@mark-pictor-csec
Copy link
Author

Thanks!

go119-fuzz-build is about native fuzzing introduced in golang 1.19

So ngolo-fuzzing works with this? If so, where would I find it?

@catenacyber
Copy link
Owner

https://github.com/AdamKorcz/go-118-fuzz-build

ngolo-fuzzing uses libFuzzer style and not golang native.
Should not be too hard to add...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants