microsoft / onefuzz

A self-hosted Fuzzing-As-A-Service platform

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

target_options are missing from the libfuzzer_crash_report task when using the libfuzzer template

chkeita opened this issue · comments

These are two tasks launched via the libfuzzer template. The crash report task is missing the target_options set in the libfuzzer task.

  • libfuzzer
 "task": {
            "check_asan_log": false,
            "check_debugger": true,
            "check_fuzzer_help": true,
            "duration": 168,
            "ensemble_sync_delay": 0,
            "expect_crash_on_failure": false,
            "preserve_existing_outputs": false,
            "reboot_after_setup": true,
            "rename_output": false,
            "target_env": {
                "ASAN_OPTIONS": "detect_container_overflow=0"
            },
            "target_exe": "libraw_fuzz.exe",
            "target_options": [
                "-runs=10000",
                "-rss_limit_mb=13312"
            ],
            "target_options_merge": false,
            "type": "libfuzzer_fuzz"
        }
  • crash report
  "task": {
      "check_asan_log": false,
      "check_debugger": true,
      "check_fuzzer_help": true,
      "duration": 168,
      "minimized_stack_depth": 4,
      "preserve_existing_outputs": false,
      "reboot_after_setup": true,
      "rename_output": false,
      "target_env": {
          "ASAN_OPTIONS": "detect_container_overflow=0"
      },
      "target_exe": "libraw_fuzz.exe",
      "target_options_merge": false,
      "target_timeout": 120,
      "type": "libfuzzer_crash_report"
  }

AB#164674

false alert. The issue was the user set the fuzzing_target_options paramter and not the target_options