Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adds gcrypt to elliptic curve diff fuzzer #1696

Merged
merged 3 commits into from
Aug 9, 2018

Conversation

catenacyber
Copy link
Contributor

Also adds corpus to the project

Any better idea than my ugly hack as both gcrypt and openssl export a function named poly1305_blocks ?

@google google deleted a comment from hoosein-H Aug 9, 2018
@catenacyber
Copy link
Contributor Author

And here is another commit with another solution (looks better to me)

Copy link
Contributor

@Dor1s Dor1s left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, don't have a better idea for a name conflict in a static build. Maybe @guidovranken has some

RUN git clone --depth 1 https://github.com/catenacyber/elliptic-curve-differential-fuzzer.git ecfuzzer
RUN git clone --depth 1 https://github.com/ARMmbed/mbedtls.git mbedtls
RUN git clone --depth 1 https://github.com/ANSSI-FR/libecc.git libecc
RUN git clone --depth 1 https://github.com/openssl/openssl.git openssl
RUN curl -O https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.32.tar.bz2
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I used to think that we usually do either RUN wget or ADD, e.g.

ADD https://sourceforge.net/projects/lame/files/latest/download lame.tar.gz

But probably this is fine too, since you used it in other Dockerfiles already

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

@@ -16,10 +16,12 @@

FROM gcr.io/oss-fuzz-base/base-builder
MAINTAINER p.antoine@catenacyber.fr
RUN apt-get update && apt-get install -y make cmake
RUN apt-get update && apt-get install -y make cmake curl bzip2 autoconf automake libtool sed
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you really need to install curl here? E.g. here it's not installed: https://github.com/google/oss-fuzz/blob/6c0458a14cea99e7de83fb0cde60eeb6635ce56e/projects/gnupg/Dockerfile

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok with ADD

@Dor1s
Copy link
Contributor

Dor1s commented Aug 9, 2018

And here is another commit with another solution (looks better to me)

Nice, you can just exclude it! That's much better! Please remove the lines you've commented out.

@catenacyber
Copy link
Contributor Author

Here is the reviewed code

@Dor1s Dor1s merged commit 48c648e into google:master Aug 9, 2018
@Dor1s
Copy link
Contributor

Dor1s commented Aug 9, 2018

Thanks!

@catenacyber catenacyber deleted the ecfuzzgcrypt branch August 28, 2018 06:00
tmatth pushed a commit to tmatth/oss-fuzz that referenced this pull request Oct 22, 2018
)

* Adds gcrypt to elliptic curve diff fuzzer

And adds corpus to the project

* A way to solve conflict between openssl and gcrypt

* Code review : no longer use of curl nor sed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants