39 Commits (master)

Author	SHA1	Message	Date
brunoerg	d823ba6e20	doc: fuzz: remove Honggfuzz NetDriver instructions	3 weeks ago
MarcoFalke	fa6c1946d2	doc: Adjust links in OSS-Fuzz section	1 month ago
Jon Atack	735436df8c	Remove outdated Eclipser fuzzing documentation ... [skip ci]	2 months ago
Pieter Wuille	f15e817811	build: add more CMake presets (dev-mode, libfuzzer, libfuzzer-nosan)	2 months ago
MarcoFalke	8888beea8d	scripted-diff: fuzz: Rename fuzz_seed_corpus to fuzz_corpora ... -BEGIN VERIFY SCRIPT- ren() { sed -i "s:\<$1\>:$2:g" $( git grep -l "$1" ) ; } ren fuzz_seed_corpus fuzz_corpora ren FUZZ_SEED_CORPUS_DIR FUZZ_CORPORA_DIR -END VERIFY SCRIPT-	2 months ago
MarcoFalke	fa09cb41f5	refactor: Remove unused LogPrint	2 months ago
Hennadii Stepanov	6ce50fd9d0	doc: Update for CMake-based build system ... Co-authored-by: Lőrinc <pap.lorinc@gmail.com> Co-authored-by: pablomartin4btc <pablomartin4btc@gmail.com>	3 months ago
Cory Fields	f8a06f7a02	doc: remove references to disable-asm option now that it's gone ... The comment about sha256_sse4::Transform is believed to be old and stale.	8 months ago
fanquake	c1247c3746	docs: fixup honggfuzz patch ... Closes #28019.	1 year ago
fanquake	b49e19ccd9	doc: use arch agnostic clang path in fuzzing doc (macOS)	2 years ago
Suriyaa Sundararuban	f84e445dee	doc: Correct linked Microsoft URLs	2 years ago
Vasil Dimov	6f7c7567c5	fuzz: parse the command line arguments in fuzz tests ... Retrieve the command line arguments from the fuzzer and save them for later retrieval by `BasicTestingSetup` so that we gain extra flexibility of passing any config options on the test command line, e.g.: ``` FUZZ=addrman ./src/test/fuzz/fuzz --checkaddrman=5 ``` A fuzz test should call `MakeNoLogFileContext<>()` in its initialize function in order to invoke the constructor of `BasicTestingSetup`, which sets `gArgs`.	3 years ago
Alex Groce	6cac99ac07	Add a brief overview of fuzzing/Bitcoin Core fuzzing ... - Google's repo - Our report - John's advice on fuzz-friendly development	3 years ago
W. J. van der Laan	29b030bca3	Merge bitcoin/bitcoin#22585: fuzz: add guide to fuzzing with Eclipser v1.x ... 6e1150ea3b fuzz: add guide to fuzzing with Eclipser v1.x (Alex Groce) Pull request description: MarcoFalke and practicalswift here's an Eclipser guide, reconstructed from their documentation and my docker history getting it up and running. It might be good if someone confirmed it actually works for them in a fresh ubuntu 20.04. ACKs for top commit: practicalswift: ACK 6e1150ea3b Tree-SHA512: ca855932fd7a2c1d1005d572ab5fabc26f42d779f9baf279783f08a43dd72ec60f57239135d30c2a82781e593626fec2c96bb19fb91e1b777cef2d83a54eba35	3 years ago
MarcoFalke	fa050bbc0a	test: Update test README and lint script	3 years ago
Alex Groce	6e1150ea3b	fuzz: add guide to fuzzing with Eclipser v1.x	3 years ago
Alex Groce	8a4f0fcd3f	Document faster throughput configuration	3 years ago
Jon Atack	d8f1ea7227	doc: describe in fuzzing.md how to reproduce a CI crash ... and add/improve a few headers	4 years ago
MarcoFalke	fadd98d02f	doc: Fix OSS-Fuzz links	4 years ago
Adam Jonas	47c3ea021e	doc: add OSS-Fuzz section to fuzzing.md doc ... Co-authored-by: Russell Yanofsky <russ@yanofsky.org>	4 years ago
MarcoFalke	fab633d2db	doc: Update fuzzing docs for afl-clang-lto	4 years ago
MarcoFalke	7f831346cb	Merge #20380: doc: Add instructions on how to fuzz the P2P layer using Honggfuzz NetDriver ... fd0be92cff doc: Add instructions on how to fuzz the P2P layer using Honggfuzz NetDriver (practicalswift) Pull request description: Add instructions on how to fuzz the P2P layer using [Honggfuzz NetDriver](http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html). Honggfuzz NetDriver allows for very easy fuzzing of TCP servers such as Bitcoin Core without having to write any custom fuzzing harness. The `bitcoind` server process is largely fuzzed without modification. This makes the fuzzing highly realistic: a bug reachable by the fuzzer is likely also remotely triggerable by an untrusted peer. Top commit has no ACKs. Tree-SHA512: 9e98cb30f00664c00c8ff9fd224ff9822bff3fd849652172df48dbaeade1dd1a5fc67ae53203f1966a1d4210671b35656009a2d8b84affccf3ddf1fd86124f6e	4 years ago
MarcoFalke	44444ba759	fuzz: Link all targets once	4 years ago
practicalswift	fd0be92cff	doc: Add instructions on how to fuzz the P2P layer using Honggfuzz NetDriver	4 years ago
nsa	2b78a11b48	doc: afl fuzzing comment about afl-gcc and afl-g++ ... This commit includes a short comment in doc/fuzzing.md that gives guidance on compiling Bitcoin Core with AFL instrumentation using afl-gcc and afl-g++.	4 years ago
Vasil Dimov	0012471391	build: turn on --enable-c++17 by --enable-fuzz ... Fuzzing code uses C++17 specific code (e.g. std::optional), so it is not possible to compile with --enable-fuzz and without --enable-c++17. Thus, turn on --enable-c++17 whenever --enable-fuzz is used.	4 years ago
Martin Zumsande	872aa25fa1	doc: add c++17-enable to fuzzing instructions	5 years ago
practicalswift	bb1ec36fb1	doc: Document how to fuzz Bitcoin Core using honggfuzz	5 years ago
practicalswift	33dd764984	doc: Add fuzzing quickstart guides for libFuzzer and afl-fuzz. Simplify instructions.	5 years ago
MarcoFalke	fa4fa88d76	doc: Remove --disable-ccache from docs	5 years ago
Fabian Jahr	b6c3e84e87	doc: Improve fuzzing docs for macOS users	5 years ago
practicalswift	595cc9bcaf	docs: Add undefined to --with-sanitizers=fuzzer,address	5 years ago
qmma	84edfc72e5	Update doc and CI config	5 years ago
MarcoFalke	fa7ca8ef58	qa: Add test/fuzz/test_runner.py	6 years ago
MarcoFalke	2ca632e5b4	test: Build fuzz targets into seperate executables	6 years ago
benthecarman	31097b7b02	docs: Spelling error fix on fuzzing.md	6 years ago
MarcoFalke	fad058a79f	build: Allow to configure --with-sanitizers=fuzzer	6 years ago
practicalswift	693247b82b	[test] Speed up fuzzing by ~200x when using afl-fuzz ... Enable the `afl-clang-fast++` features deferred forkserver (`__AFL_INIT`) and persistent mode (`__AFL_LOOP(1000)`). Before this patch: ``` $ afl-fuzz -i input -o output -m512 -- src/test/test_bitcoin_fuzzy [*] Validating target binary... [!] WARNING: The target binary is pretty slow! See /usr/local/share/doc/afl/perf_tips.txt. [+] Here are some useful stats: Test case count : 1 favored, 0 variable, 1 total Bitmap range : 1072 to 1072 bits (average: 1072.00 bits) Exec timing : 20.4k to 20.4k us (average: 20.4k us) … exec speed : 57.58/sec (slow!) exec speed : 48.35/sec (slow!) exec speed : 53.78/sec (slow!) ``` After this patch: ``` $ afl-fuzz -i input -o output -m512 -- src/test/test_bitcoin_fuzzy [*] Validating target binary... [+] Persistent mode binary detected. [+] Deferred forkserver binary detected. [+] Here are some useful stats: Test case count : 1 favored, 0 variable, 1 total Bitmap range : 24 to 24 bits (average: 24.00 bits) Exec timing : 114 to 114 us (average: 114 us) … exec speed : 15.9k/sec exec speed : 13.1k/sec exec speed : 15.1k/sec ```	8 years ago
Wladimir J. van der Laan	8b15434b59	doc: Add bare-bones documentation for fuzzing	8 years ago