Skip to content

fuzz: Add fuzzing syscall sandbox: detect use of unexpected syscalls when fuzzing ("syscall sanitizer") #21538

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 2 commits into from
Closed

fuzz: Add fuzzing syscall sandbox: detect use of unexpected syscalls when fuzzing ("syscall sanitizer") #21538

wants to merge 2 commits into from

Conversation

practicalswift
Copy link
Contributor

@practicalswift practicalswift commented Mar 28, 2021 •
edited
Loading

Add fuzzing syscall sandbox: detect use of unexpected syscalls when fuzzing.

This PR is based on #20487. Only the last commit is new to this PR.

Example use:

$ make distclean
$ ./autogen.sh
$ CC=clang CXX=clang++ ./configure --enable-fuzz --with-sanitizers=fuzzer --with-syscall-sandbox
$ make
$ FUZZ=example_fuzzing_harness src/test/fuzz/fuzz
…
ERROR: The syscall "socket" (syscall number 41) is not allowed by the syscall sandbox in thread "*unnamed*". Please report. Exiting.
terminate called without an active exception
==27953== ERROR: libFuzzer: deadly signal
…
    #11 0x7f11a5dd0b20 in std::terminate() (/usr/lib/x86_64-linux-gnu/libstdc++.so.6+0x92b20)
    #12 0x56445a4b8cb7 in (anonymous namespace)::SyscallSandboxDebugSignalHandler(int, siginfo_t*, void*) src/util/syscall_sandbox.cpp:71:5
…
artifact_prefix='./'; Test unit written to ./crash-78657a4e3dda0e9557c5a4f56dd9d19763459865

In this example use of an unexpected networking syscall (socket) was detected when running the example harness example_fuzzing_harness.

@DrahtBot
Copy link
Contributor

DrahtBot commented Mar 28, 2021 •
edited
Loading

The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

Conflicts

Reviewers, this pull request conflicts with the following ones:

If you consider this pull request important, please also help to review the conflicting pull requests. Ideally, start with the one that should be merged first.

@DrahtBot DrahtBot mentioned this pull request Mar 28, 2021
Closed
This was referenced Mar 28, 2021
Closed
Merged
Closed
Merged
Draft
Merged
Closed
Draft
@practicalswift practicalswift changed the title fuzz: Add fuzzing syscall sandbox: detect use of unexpected syscalls when fuzzing fuzz: Add fuzzing syscall sandbox: detect use of unexpected syscalls when fuzzing ("syscall sanitizer") Mar 28, 2021
@practicalswift practicalswift mentioned this pull request Mar 30, 2021
Closed
This was referenced Apr 3, 2021
Merged
Merged
@DrahtBot DrahtBot mentioned this pull request Apr 12, 2021
Draft
This was referenced Apr 28, 2021
Merged
Closed
Merged
This was referenced Apr 28, 2021
Merged
Merged
@DrahtBot
Copy link
Contributor

DrahtBot commented May 3, 2021

🕵️ @jonatack @sipa have been requested to review this pull request as specified in the REVIEWERS file.

This was referenced May 13, 2021
Merged
Merged
@DrahtBot DrahtBot mentioned this pull request May 20, 2021
Merged
This was referenced Jun 4, 2021
Merged
Closed
@bitcoin bitcoin locked as resolved and limited conversation to collaborators Aug 18, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
1 more reviewer

@3h6-1 3h6-1 3h6-1 approved these changes

Reviewers whose approvals may not affect merge requirements
Assignees
No one assigned
Labels
Tests
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@practicalswift @DrahtBot @3h6-1 @laanwj