OSS-Fuzz Integration - Local Testing Guide

This guide explains how to build, run, and test fuzzers locally using OSS-Fuzz.
Fuzzers and seed generator can be built using make all in this repository.

Prerequisites

• Docker
• Python 3
• Git
• Clang
• LLVM

git clone https://github.com/Segwaz/oss-fuzz.git -b libdbmx
cd oss-fuzz

1. Build image

python3 infra/helper.py build_image libmdbx

1. Build fuzzers

python3 infra/helper.py build_fuzzers libmdbx

2. Run a fuzzer

python3 infra/helper.py run_fuzzer libmdbx fuzz_raw_db_format

3. Reproduce

Run the fuzzer in this directory with the testcase:

./fuzz_raw_db_format crash-XXXXXX

You may need to adjust sanitizers in the Makefile.

Local build

By default make builds without -fsanitize=fuzzer,address for OSS-Fuzz compatibility (OSS-Fuzz supplies its own sanitizer flags). For local reproduction or standalone fuzzing, pass LOCAL=1 to add those flags:

make LOCAL=1

Debug output can be seen by setting MDBX_FUZZ_DEBUG in fuzz.h.

Generate seeds

Run the seed generator in this directory:

./db_seed_gen [corpus_pathname]

Seeds are in ./corpus by default. To integrate with OSS-Fuzz they must be placed in a zip file named <fuzzer_name>_seed_corpus.zip placed in ./fuzz/seed directory.