google / google/honggfuzz

Inputs always crash if workdir contains colon

Open
#530 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
3.4k
Forks
539
PR merge metrics
No merged PRs in 30d

Description

When running hongfuzz on a trivial `LLVMFuzzerTestOneInput` harness from a directory that contains a `:` like e.g. `foo:bar`, honggfuzz reports all tested inputs as crashes:

Image

The following Dockerfile reproduces the behaviour (on my machines):

```Dockerfile
FROM ubuntu@sha256:35f3a8badf2f74c1b320a643b343536f5132f245cbefc40ef802b6203a166d04
WORKDIR /honggfuzz

RUN apt -y update
RUN apt -y install binutils-dev libunwind-dev libblocksruntime-dev clang make

ADD https://github.com/google/honggfuzz.git#ded8c87bcf3cc32f64c1097746a3461d6da1c24a .
RUN make && make install

COPY <
#include

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
return 0;
}
EOF

RUN hfuzz-clang++ -fsanitize=fuzzer /harness.cpp -o /harness

COPY <

Contributor guide

Open the contributing guide

Research direction

Start by building honggfuzz with the Dockerfile reproduction and run the entrypoint command from /foo:bar. Trace how honggfuzz handles the workdir and output path when the path contains a colon. Done means the trivial LLVMFuzzerTestOneInput harness no longer reports every tested input as a crash in that environment.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
security, testing-qa
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.